Microsoft Security Sr. Product Manager

Microsoft Security Sr. Product Manager

Job Type: Full-Time, Hybrid-based in Southern California (80% WFH, 20% San Diego Office)
Location: Southern, CA
Pay: $122,900 - $163,800
Benefits:

• Health
• Dental & Vision
• No Cost, Short-Term Disability & Basic Life Insurance
• 401k Plan (4% Employer Match)
• Generous PTO

• Own multi-year planning across Entra ID, Intune, Defender, and Purview.
• Implement and manage MFA, SSO, Conditional Access, identity lifecycle workflows, and privileged access management.
• Strengthen RBAC models, admin tiering, and overall identity governance.

• Oversee workstation and mobile device security through Intune, including baselines, compliance, encryption, and app protection.
• Deploy and optimize Defender XDR for endpoint, identity, email, and cloud threat protection.
• Lead data governance using Purview classifications, sensitivity labels, DLP policies, retention rules, and insider risk controls.

• Partner with IT, Security, and business teams to implement standards, reduce risk, and improve Secure Score.
• Manage product lifecycle for security initiatives, prioritize high-impact enhancements, and guide organizational change.
• Respond to Microsoft security alerts and coordinate incident handling with relevant teams.

• Maintain clear documentation for policies, configurations, and workflows.
• Communicate updates and security impacts to technical and non-technical audiences.
• Support training and enablement for administrators and end users.

• 5+ years in Product Management, Security Engineering, and Technical Program Management with Microsoft cloud environments preferred.
• Hands-on experience with Entra ID, Intune, Defender, Conditional Access, SSO/MFA, and workstation hardening.
• Proven success rolling out enterprise-wide Microsoft security initiatives.
• Strong understanding of identity governance, Zero Trust, endpoint security, data protection, and compliance frameworks (SOC 2, ISO 27001, NIST).
• Experience managing cross-functional projects involving technical and non-technical groups.
• Working knowledge of PowerShell, KQL, and Microsoft Graph for automation.

• Microsoft certifications such as SC-300, SC-400, SC-200, AZ-500, MS-101, MD-102.
• Experience with Microsoft Sentinel (SIEM/SOAR), Defender for Cloud Apps, and Identity Protection preferred.
• Background in enterprise cybersecurity, endpoint management, or cloud security architecture.
• Experience optimizing licensing and aligning security SKUs with business needs.