Senior Technical Program Manager - Technical at Microsoft

, , United States -

Full Time

Start Date

Immediate

Expiry Date

09 Mar, 26

Salary

234700.0

Posted On

09 Dec, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Technical Program Management, Incident Response, Threat Detection, Cybersecurity Fundamentals, Data Analysis, KQL, SQL, Python, Automation, Operational Security, Reporting Frameworks, Cross-Functional Collaboration, Cloud Security, Microsoft Security Tools, Process Improvement, Governance

Industry

Software Development

Description

Overview The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world. The Microsoft Insider Risk Program is dedicated to safeguarding our people, data, and intellectual property from internal threats that could compromise the security and integrity of the company. Built on a foundation of innovation and collaboration, the program combines proactive detection, advanced data analytics, and effective response mechanisms to identify and mitigate insider risks. Our team is focused on developing advanced detection and response capabilities and proactive insider risk identification, enabling Microsoft to remain resilient against internal risks in an ever-evolving threat landscape. We are looking for a Senior Technical Program Manager to join to our team. As part of this program, you will play a critical role in leading technical and operational components of Insider Risk. The successful candidate will have a comprehensive background in insider threat detection, incident response, and security engineering, with a proven ability to manage complex technical programs. You will bridge technical depth with program execution, translating investigative needs into scalable detection solutions and driving measurable improvements in Microsoft’s risk posture. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day. Responsibilities Detection & Response Enablement Lead programs that improve how insider threat detections are developed, validated, and operationalized across Microsoft’s environments. Partner with engineering and analysts to define detection requirements, validate logic, and continuously improve alert fidelity. Support live investigations and incident response by integrating new telemetry sources, tools, and automation that accelerate case resolution. Investigation Reporting & Communication Collaborate with investigators to synthesize findings, identify systemic root causes, and translate technical results into clear, actionable narratives for executive stakeholders. Develop and standardize reporting frameworks that communicate investigation outcomes, trends, and lessons learned across Insider Risk, Legal, HR, and Engineering. Ensure consistent documentation quality, accuracy, and traceability for all investigation-related communications and metrics. Program Leadership & Execution Manage end-to-end delivery of key technical initiatives, from concept through deployment, aligning outcomes to Microsoft’s Insider Risk strategy. Translate complex technical and investigative insights into clear program plans and roadmaps. Drive accountability and clarity across cross-functional partners through structured communication, metrics, and governance. Technical Strategy & Integration Partner with engineering to align detection pipelines, analytic logic, and reliability objectives with program goals. Identify opportunities to automate manual workflows, integrate new data sources, and strengthen control coverage. Influence service design decisions that balance privacy, operational efficiency, and risk reduction. Continuous Improvement & Governance Develop and maintain playbooks, validation frameworks, and operating procedures to ensure repeatability and audit readiness. Track and report measurable improvements in detection coverage, response efficiency, and investigative accuracy. Promote process discipline and operational excellence across the Insider Threat lifecycle. Qualifications Required Qualifications: Bachelor's Degree AND 4+ years experience in engineering, product/technical program management, data analysis, or product development OR equivalent experience. 2+ years of experience managing cross-functional and/or cross-team projects. 4+ years of experience in technical program management, incident response, threat detection, or related security engineering roles. 4+years of experience of in-depth understanding of cybersecurity fundamentals, detection pipelines, and cloud security concepts (Azure, M365, identity, access management). 2+ years of experience with demonstrated proficiency in data analysis using KQL, SQL, or Python to support investigations and detection validation. Other Requirements: Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. Citizenship Verification: This role will require access to information that is controlled for export under export control regulations, potentially under the U.S. International Traffic in Arms Regulations or Export Administration Regulations, the EU Dual Use Regulation, and/or other export control regulations. As a condition of employment, the successful candidate will be required to provide either proof of their country of citizenship or proof of their U.S. permanent residency or other protected status (e.g., under 8 U.S.C. 1324b(a)(3)) for assessment of eligibility to access the export controlled information. To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified with a valid passport. Lawful permanent residents, refugees, and asylees may verify status using other documents, where applicable. Citizenship Verification: This position requires verification of citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local government agency customers and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified with a valid passport. Preferred Qualifications: Experience with Insider Risk, DLP, or behavioral-based detection and investigation programs. Background in threat hunting, investigations, or operational security at enterprise scale. Familiarity with Microsoft security and compliance tooling (Sentinel, Defender, Purview, M365 DLP, AAD logs, etc.). Efficient communication skills with the ability to convey investigative findings and technical details to both executives and engineers. Highly organized, process-driven, and disciplined in execution, with demonstrated commitment to quality, clarity, and confidentiality. #MSFTSecurity #CISOOrg Technical Program Management IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $158,400 - $258,000 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Responsibilities

The Senior Technical Program Manager will lead programs to enhance insider threat detection and response capabilities. This includes managing technical initiatives, collaborating with cross-functional teams, and ensuring effective communication of investigation outcomes.