Share job

CoreAI is at the forefront of Microsoft’s mission to redefine how software is built and experienced. We are responsible for building the foundational platforms, services, programming models, and developer experiences that power the next generation of applications using Generative Artificial Intelligence (GenAI). Our work enables developers and enterprises to harness the full potential of AI to create intelligent, adaptive, and transformative software.

The 1ES (One Engineering System) team is responsible for enabling the world's best engineering teams with world-class tools and systems that help them ship products their customers love. 1ES develops and operates a set of engineering tools and services including build, verification services, code review tools, data analysis, and machine learning services, all working toward a unified engineering system for internal Microsoft needs. Distributed build, static analysis, test and release are at the center of Microsoft 1ES and are helping major groups within the company deliver features faster and with better quality. Our services are used by tens of thousands of developers, and we build, analyze, test and release millions of projects daily in a distributed service running at scale in multiple data centers across the world.

We are looking for a Senior Product Manager to lead product strategy and execution for GitHub Advanced Security for Azure DevOps, an external-facing product, in close partnership with GitHub’s GHAS and CodeQL teams. You will define the roadmap, align cross-organizational partners, and engage directly with customers and the market to surface unmet needs, synthesize telemetry and qualitative feedback, validate market opportunity, and evaluate tradeoffs and release criteria with Business Teams, and Engineering. You’ll translate these insights into prioritized investments, clear OKRs/KPIs and release criteria, and a roadmap.

You will also participate in the development of internal code security products, such as static analysis or secrets detection, to protect the engineering systems.

This role follows Microsoft’s flexible work model, with an expectation of in-person collaboration at least three days per week to foster alignment, innovation, and team connection.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Required Qualifications:

• Bachelor's Degree AND 5+ years experience in product/service/program management or software development
  • OR equivalent experience.
• 3+ years of experience in driving complex cross organization security initiatives in deep technical area such as code security.
• Proven track record improving product metrics such as adoption, usage depth, satisfaction, and time to remediate security issues.
• Experience on CI/CD security for Azure DevOps and GitHub

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

• Bachelor's Degree AND 8+ years experience in product/service/program management or software development OR equivalent experience.
• 2+ years experience taking a product, feature, or experience to market (e.g., design, addressing product market fit, and launch, internal tool/framework).
• 4+ years experience improving product metrics for a product, feature, or experience in a market (e.g., growing customer base, expanding customer usage, avoiding customer churn).
• 4+ years experience disrupting a market for a product, feature, or experience (e.g., competitive disruption, taking the place of an established competing product
• Grasp of secure development (SDL) and threat modeling, including STRIDE, attack trees, and abuse cases.
• Hands-on experience with code security tooling: CodeQL, Roslyn, Prefast or equivalent, secrets scanning, SARIF workflows.
• Exposure to AI safety and security for code and model centric scenarios, including evaluation and guardrail patterns.
• Storytelling and executive communication experience. Ability to negotiate priorities and build coalitions across organizational boundaries.

Product Management IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $158,400 - $258,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

#CoreAI #1ES #GitHubAdvancedSecurity #AzureDevOps #DevSecOps #StaticAnalysis #SecretsDetection #AISecurity #ProductManagement #Security

• Define product vision and strategy by leveraging a deep understanding of the customer experience and competitive market.
• Identify short- and long-term investment opportunities, evaluate tradeoffs, and drive the product roadmap.
• Advance AI-driven approaches within your domain by developing and implementing an AI-first strategy that supports the ongoing evolution of security within SDLC.
• Lead advancements in CodeQL static analysis, secret scanning, and remediation within GitHub Advanced Security for Azure DevOps.
• Engage customers to surface unmet needs and validate market opportunities.
• Turn telemetry and feedback into prioritized investments, OKRs, and KPIs.
• Align partners across GitHub, Azure DevOps, and 1ES to deliver outcomes.
• Contribute to internal code security tooling with 1ES to strengthen Microsoft’s engineering systems.