OverviewOur agents now read from documents, tools, connectors, and the open web, and any of that content could be crafted by an attacker to hijack what the agent does next. The
Office Security Team is looking for a
Senior Product Manager to own the layer that stops malicious instructions from ever landing, the detection that catches them on the way in, and the containment that makes sure a single bad input cannot cascade into real damage. Cross-prompt injection, or XPIA, is the defining security threat of the agentic era, and there is no textbook for beating it.
The defenses you ship decide whether people can trust AI with their most sensitive work, from their finances to their health records to their company's crown jewels. This is a place to go deep: the detection and containment problems here are genuinely unsolved, the feedback loop is fast, and the craft you build will be in demand for the rest of the agentic era. pre-AI era, and influence peers to embed AI into the fabric of how we work.
ResponsibilitiesThis role is for a problem-solver who is energized by hard, unmapped challenges. You will likely see yourself in most of the following.
- You go deep on security and systems problems, and an unsolved threat energizes you rather than deterring you.
- You are driven by real customer impact, and you seek out the attack scenarios and stakes that make the work matter.
- You turn ambiguity into a plan, owning strategy, roadmap, and crisp execution across many partner teams.
- You design guardrails that protect people without getting in their way, balancing security with a great user experience.
- You build trust and momentum across groups, and you ship results others can build on.
- You operate independently with a strong get-it-done bias when the path is unclear.
- You communicate with clarity and conviction, in writing and in the room.
QualificationsRequired Qualifications:- Bachelor's Degree AND 5+ years experience in product/service/program management or software development
- OR equivalent experience.
Preferred Qualifications:- Experience shipping security, platform, or infrastructure capabilities; a background in threat modeling, application security, or AI and LLM security is a solid plus.
- A track record of using metrics and telemetry to prove and improve real-world security posture.
- Experience designing user-facing trust, consent, or safety experiences is a plus.
- Demonstrated experience across the full software product development cycle.
- Familiarity with LLMs, AI, and agentic worklfows; demonstrated use of AI in daily work that improve efficiency, productivity, success outcomes.
- Self-driven technical curiosity and unafraid to try something new or ambiguous.
Product Management IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
