Overview Microsoft 365 Copilot is the AI platform that will transform how work gets done. It’s rapidly becoming the central entry point across Word, Excel, PowerPoint, Outlook, Teams, and agents driving AI-led productivity for every business. AI security is a critical challenge Microsoft must tackle to earn our customer trust. The Microsoft 365 Copilot Security Team (SPEAR) was formed to strengthen the security posture of M365 Copilot’s agentic and autonomous systems across the Microsoft ecosystem. SPEAR provides shared security services, delivers common capabilities, and standardizes security practices across all M365 Copilot teams. Its charter is to protect Copilot apps and features by embedding agentic security throughout the ecosystem and the core Copilot architecture stack.
As a Principal Product Manager on the SPEAR team, you will drive initiatives that help ensure M365 customers get the most out of Copilot on the most secure platform in the industry. You will set product vision and strategy for shared security services, deliver common security capabilities, and help standardize strong security practices across M365 Copilot teams. You will collaborate with applied scientists, engineers, security experts, and product managers across Microsoft to shape the strategy and roadmap.
We are looking for a Principal Product Manager with a deep curiosity for cybersecurity and experience shaping AI-driven products. In this role, you will own key problem areas, define product strategy and priorities, and drive outcomes that measurably improve M365 Copilot and customer security posture. You will leverage M365’s security ecosystem (e.g., Defender, Purview, Safe Links, Intune) to translate threat patterns and XPIA risks into durable product and engineering systems that embed agentic security across the M365 Copilot architecture. You will partner closely with engineering and applied science to deliver high-quality, scalable capabilities that harden Microsoft’s agentic and autonomous AI stack. Location & Work Model: This role is based in Redmond, WA with an expectation of3 days per week onsite. Candidates located outside of the Redmond area are considered for fully remote work.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

• Responsibilities- Own a defined security problem space end-to-end, setting product vision, strategy, and roadmap grounded in attacker behavior, customer risk, and business priorities.
• Translate cybersecurity signals (telemetry, threat intelligence, research, and customer feedback) into clear product decisions, prioritizing investments for measurable security impact.
• Partner with incident response and customer-facing teams to learn from real-world cases, communicate customer impact, and drive product changes that reduce recurrence and time-to-mitigate.
• Define product requirements for shared security services and leverage telemetry to identify defect patterns, abuse/misuse trends, and systemic gaps across Copilot experiences.
• Define and own security success metrics and validation plans (including evaluation signals) to detect, prevent, and quickly remediate security regressions.

Qualifications:

Required Qualifications:

• Bachelor's Degree AND 8+ years experience in product/service/program management or software developmentOR equivalent experience.

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:

Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:- Bachelor's Degree AND 12+ years experience in product/service/program management or software developmentOR equivalent experience.

• 4+ years experience taking a product, feature, or experience to market (e.g., design, addressing product market fit, and launch, internal tool/framework).
• 6+ years experience improving product metrics for a product, feature, or experience in a market (e.g., growing customer base, expanding customer usage, avoiding customer churn).
• 6+ years experience disrupting a market for a product, feature, or experience (e.g., competitive disruption, taking the place of an established competing product).
• 2+ years demonstrated technical depth with LLM Systems and agent orchestration.
• 3+ years demonstrated experience driving security initiatives, implementing robust security measures, and ensuring the protection of products and customer data.
• Track record of delivering complex, cross-team initiatives with measurable customer and/or security impact.
• Written and verbal communication skills, with the ability to influence and align senior stakeholders across engineering and business.
• Demonstrated ability to operate independently, manage multiple workstreams, and drive execution in a fast-paced environment.
• Technical depth across Microsoft Security products (e.g., Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps) and how customers deploy them in enterprise environments.
• Understanding of agentic AI risks (e.g., jailbreaks, prompt injection, toolchain misuse) and threat-driven engineering practices.
• Prior experience in cybersecurity (e.g., detection/response, security engineering, offensive security, red teaming, or penetration testing).
  #Copilot, #LLM, #Agent, #Security, #M365

Product Management IC5 - The typical base pay range for this role across the U.S. is USD $139,900 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.