[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Microsoft jobs](https://jobs.opennash.com/companies/microsoft/) · [Search jobs](/search/) Microsoft # Principal Security Research Manager United States, Washington, Redmond Manager or lead Research & Science Listed on Microsoft’s official careers site. Posted August 25, 2026. Check that it is still open and apply there. [Apply on Microsoft’s careers site →](https://apply.careers.microsoft.com/careers/job/1970393556943181) [OpenNash Jobs](https://jobs.opennash.com/) / [Microsoft](https://jobs.opennash.com/companies/microsoft/) / Principal Security Research Manager ## Job description Design and build end-to-end evaluation harnesses for agentic security and engineering workflows, including triage, remediation, repo readiness, escalation, tool use, and scan-to-verified-closure paths. Create representative benchmark suites and golden datasets that include normal, edge, adversarial, failure-recovery, regression, and production-derived cases. Implement deterministic validators, automated graders, trace analyzers, result stores, comparison views, and workflow adapters that make evaluations repeatable and actionable. Measure task success, correctness, safety and policy compliance, failure recovery, latency, tool-call behavior, token usage, total cost per successful outcome, and human-review effort. Compare models, prompts, tools, memory strategies, policies, and orchestration patterns under consistent conditions and help teams understand quality-versus-efficiency tradeoffs. Integrate evaluations into engineering workflows, CI/CD, release gates, and decision processes so material agent changes are supported by reproducible evidence before production rollout. Connect offline evaluation results with production feedback, including accepted and rejected outputs, human overrides, incidents, rollbacks, escaped defects, and customer or service-health signals. Detect regressions, benchmark drift, evaluator miscalibration, and cases where eval scores improve while real-world outcomes do not. Partner with agent builders, product teams, security engineers, data scientists, program managers, and leadership to turn evaluation results into release recommendations and autonomy-boundary decisions. ### Convert learnings into reusable paved paths playbooks, templates, onboarding guides, dashboards, scorecards, and reference implementations that can scale across MSec. Automated and human-in-the-loop grading pipelines with calibration, sampling, and confidence thresholds. Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection 1+ year(s) people management experience. Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 5+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Master's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND 12+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience. Proven software engineering experience building production systems, developer platforms, test infrastructure, automation frameworks, data pipelines, quality systems, or reliability tooling. Ability to design and implement evaluation systems end to end, including task definition, dataset creation, harness implementation, scoring, analysis, and operational integration. Demonstrated coding, debugging, system design, and operational excellence skills. Experience working with structured data, logs, traces, metrics, APIs, automation workflows, and engineering telemetry. Experience with LLMs, AI agents, model evaluation, prompt/tool orchestration, automated grading, evaluation harnesses, or benchmark design. Experience with experimentation, statistical confidence, evaluator calibration, regression analysis, human-review protocols, or quality measurement systems. Experience with security engineering, vulnerability management, SAST/SCA, SARIF, remediation workflows, secure development lifecycle, or compliance-sensitive systems. ## At a glance - Posted by the employer: Aug 25, 2026 - First seen by OpenNash: Aug 21, 2026 - Last checked: Oct 18, 2026 - Listed for: 58 days - Location: United States, Washington, Redmond[Apply on Microsoft’s careers site →](https://apply.careers.microsoft.com/careers/job/1970393556943181) ## More jobs at Microsoft ### [Applied Scientist II](https://jobs.opennash.com/companies/microsoft/jobs/1932503c468419f688ab/) United States, Washington, Redmond ### [Principal Applied Scientist](https://jobs.opennash.com/companies/microsoft/jobs/6887d8f40d7a9e34526e/) United States, Washington, Redmond ## Similar jobs at other companies ### [Staff Application Security Engineer – Threat Research](https://jobs.opennash.com/companies/cvs-health/jobs/0e09432f511614f17233/) CVS Health · New York, NY ### [Principal Agent Security Engineer](https://jobs.opennash.com/companies/fortinet/jobs/82197027511564795b8e/) Fortinet · Sunnyvale, CA, United States ### [Principal Architect - Infrastructure/Security](https://jobs.opennash.com/companies/jpmorganchase/jobs/161bb79be1b5d459a6f1/) JPMorganChase · Plano, TX, United States ### [Principal Software Engineer - Security Platforms](https://jobs.opennash.com/companies/jpmorganchase/jobs/840d796d17ca7a9bcced/) JPMorganChase · Columbus, OH, United States ### [Senior Principal System Security Lead](https://jobs.opennash.com/companies/bae-systems/jobs/ad52556e4b4fb77506e1/) BAE Systems · Totowa, New Jersey, United States OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)