Technical Program Manager II

The Cyber Defense Investigations – Escalations (CDI-ESC) team is Microsoft’s deep-dive investigative arm within Cyber Defense Operations (CDO). We lead the most complex, high-severity, and nation-state security incidents across Microsoft’s first-party cloud estate, bringing together investigators, threat hunters, security engineers, intelligence teams, and service owners to understand and respond to sophisticated security threats.

We are seeking a Technical Program Manager to help drive the programs, processes, and operational mechanisms that enable CDI-ESC to respond effectively at scale. In this role, you will work alongside security investigators, engineering teams, and CDO partners to coordinate priorities, track complex workstreams, improve operational processes, and ensure important security initiatives move from planning through execution.

You do not need to be the deepest technical security expert in the room. You will be expected to develop a strong understanding of our security operations, ask the right questions, bring structure to ambiguous problems, and help technical teams stay aligned and focused. You will turn technical and operational inputs into clear plans, actions, risks, dependencies, and measurable outcomes.

This is an opportunity to grow your technical program management skills while working directly with teams responding to some of Microsoft’s most challenging cybersecurity incidents.

• Coordinate security programs and operational initiatives by helping define objectives, milestones, owners, dependencies, timelines, and success measures and maintaining visibility into progress from planning through completion.
• Support complex incident and investigation workstreams by coordinating activities across CDI-ESC, threat intelligence, incident coordination, containment, detection engineering, service teams, and other CDO partners.
• Build and maintain program mechanisms such as roadmaps, trackers, dashboards, operating rhythms, action-item management, decision logs, and status reporting that help technical teams execute consistently.
• Drive follow-through and accountability by tracking commitments, identifying blockers and dependencies, escalating risks when appropriate, and helping ensure actions and decisions reach closure.
• Improve team processes and workflows by identifying opportunities to simplify repetitive work, strengthen handoffs, document standards, automate manual processes, and make operational practices more repeatable.
• Use data, telemetry, and AI-assisted tools to help identify trends, measure program health, automate routine program-management activities, and improve the speed and quality of operational decision-making.
• Translate technical information into clear communications by working with security investigators and engineers to summarize program status, risks, dependencies, decisions, and outcomes for technical and leadership audiences.
• Support retrospectives and continuous improvement by helping capture lessons learned from incidents, hunts, and operational activities and tracking resulting improvements through completion.
• Partner across CDO and the CISO org to build productive working relationships, coordinate shared deliverables, and help teams stay aligned around common security objectives.

Preferred Qualifications:

• Bachelor’s Degree in Business, Computer Science, Information Technology, Cybersecurity, Engineering, or a related field AND 1+ years of experience in program management, project management, security operations, engineering, data analysis, or a related technical discipline OR equivalent experience.
• Experience coordinating projects or initiatives involving multiple stakeholders, teams, or workstreams.
• Demonstrated ability to organize ambiguous or complex information into clear plans, actions, owners, milestones, and deliverables.
• Written and verbal communication skills, including the ability to summarize technical or operational information for different audiences.
• Ability to work effectively in a fast-moving environment where priorities may change in response to emerging security events.
• Familiarity with cybersecurity, incident response, security operations, threat intelligence, or cloud technologies.
• Experience working with technical or engineering teams and an interest in developing deeper knowledge of cybersecurity operations.
• Familiarity with program and data tools such as Azure DevOps, Power BI, Kusto/KQL, Microsoft 365, or similar platforms.
• Experience using AI or Copilot-based tools to summarize information, automate workflows, analyze data, or improve team productivity.
• Familiarity with operational metrics, dashboards, process improvement, or workflow automation.
• Attention to detail and demonstrated ability to manage multiple priorities while maintaining clear communication with stakeholders

Technical Program Management IC3 - The typical base pay range for this role across the U.S. is USD $102,100 - $202,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $133,800 - $219,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.