[Skip to main content](#main-content)

[OpenNash Jobs](https://jobs.opennash.com/)
[Hiring report](/reports/hiring/) · [All Microsoft jobs](https://jobs.opennash.com/companies/microsoft/) · [Search jobs](/search/)

Microsoft

# Principal Security Research Manager

United States, Washington, Redmond Manager or lead Research & Science 

Listed on Microsoft’s official careers site. Posted August 4, 2026. Check that it is still open and apply there.
[Apply on Microsoft’s careers site →](https://apply.careers.microsoft.com/careers/job/1970393556953197)

[OpenNash Jobs](https://jobs.opennash.com/) / [Microsoft](https://jobs.opennash.com/companies/microsoft/) / Principal Security Research Manager

## Job description

Lead, mentor, and develop a team of security researchers responsible for MDASH vulnerability discovery, validation, fix generation, and quality measurement. Define the research and quality roadmap for expanding MDASH coverage across vulnerability classes, programming languages, frameworks, codebase sizes, and real-world development patterns. Establish measurable quality goals and decision criteria across recall, precision, consistency, vulnerability validation, fix correctness, and end-to-end resolution.

Direct the creation and curation of representative evaluation suites and trusted ground truth drawn from purpose-built vulnerable code, public benchmarks, open-source projects, internal codebases, and production feedback, ensuring the portfolio reflects real-world customer scenarios and guides measurable improvement in MDASH. Lead systematic analysis of false negatives, false positives, inconsistent detections, validation failures, and ineffective or incorrect fixes; translate findings into prioritized improvements to the techniques, tools, agent behaviors, model configurations, and analysis methods that power MDASH.

Partner with MDASH engine, evaluation infrastructure, model, applied science, and product teams to integrate research improvements, establish release gates, and connect offline measurements with customer outcomes. Communicate technical strategy, evaluation results, risks, and investment priorities to senior leaders and cross-functional partners. Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 8+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR equivalent experience. 3+ years people management.

Deep knowledge of vulnerability classes and exploitation patterns, including memory safety, injection, authentication and authorization, cryptography, deserialization, path traversal, server-side request forgery, and business-logic flaws. Experience with manual code review, static or dynamic analysis, fuzzing, symbolic execution, taint analysis, exploit development, or variant analysis. Experience designing security benchmarks, curating ground truth, calibrating evaluators, and measuring recall, precision, false-positive rates, or fix efficacy.

Experience evaluating or building AI-assisted security systems, large language model applications, AI agents, automated graders, or human-in-the-loop evaluation workflows. Experience working across multiple programming languages and software ecosystems, such as C/C++, C#, Java, JavaScript or TypeScript, Python, and cloud-native applications. Experience with responsible vulnerability disclosure or collaboration with open-source maintainers and product security response teams.

## At a glance
- Posted by the employer: Aug 4, 2026
- First seen by OpenNash: Aug 21, 2026
- Last checked: Oct 18, 2026
- Listed for: 75 days
- Location: United States, Washington, Redmond[Apply on Microsoft’s careers site →](https://apply.careers.microsoft.com/careers/job/1970393556953197)

## More jobs at Microsoft

### [Applied Scientist II](https://jobs.opennash.com/companies/microsoft/jobs/1932503c468419f688ab/)

United States, Washington, Redmond

### [Principal Applied Scientist](https://jobs.opennash.com/companies/microsoft/jobs/6887d8f40d7a9e34526e/)

United States, Washington, Redmond

## Similar jobs at other companies

### [Staff Application Security Engineer – Threat Research](https://jobs.opennash.com/companies/cvs-health/jobs/0e09432f511614f17233/)

CVS Health · New York, NY

### [Principal Agent Security Engineer](https://jobs.opennash.com/companies/fortinet/jobs/82197027511564795b8e/)

Fortinet · Sunnyvale, CA, United States

### [Principal Architect - Infrastructure/Security](https://jobs.opennash.com/companies/jpmorganchase/jobs/161bb79be1b5d459a6f1/)

JPMorganChase · Plano, TX, United States

### [Principal Software Engineer - Security Platforms](https://jobs.opennash.com/companies/jpmorganchase/jobs/840d796d17ca7a9bcced/)

JPMorganChase · Columbus, OH, United States

### [Senior Principal System Security Lead](https://jobs.opennash.com/companies/bae-systems/jobs/ad52556e4b4fb77506e1/)

BAE Systems · Totowa, New Jersey, United States

OpenNash lists jobs from employers’ own careers sites and does not handle applications.
Dates come from the employer where stated; “first seen” and “last checked” are our own observations.

OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)