Principal Product Manager, AI Model Security

Overview

Microsoft Superintelligence team's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

This role is part of Microsoft AI's Superintelligence Team. The MAIST is a startup-like team inside Microsoft AI, created to push the boundaries of AI toward Humanist Superintelligence — ultra-capable systems that remain controllable, safety-aligned, and anchored to human values. Our mission is to create AI that amplifies human potential while ensuring humanity remains firmly in control. We aim to deliver breakthroughs that benefit society — advancing science, education, and global well‑being.

We are hiring a Product Manager to own AI model security — the discipline of making our frontier models resilient against adversarial attack and purpose‑built for security practitioners. This role has a dual mandate: (1) harden our models against the full spectrum of LLM security threats — prompt injection, data exfiltration, jail breaking, training data extraction, zero‑day exploit generation, model poisoning, and agentic workflow exploitation — and (2) partner closely with Microsoft Security product teams (Azure Security, Security Copilot) to ensure our models deliver best‑in‑class capabilities for real‑world security workflows.

This is a security role, not a safety role (we have one). You think like an attacker, understand the OWASP LLM Top 10, and bring product judgment to hard tradeoffs between model capability and attack surface. You also understand what security analysts and incident responders need from AI, and you work backwards from their workflows to define model training priorities, evaluation benchmarks, and product requirements.

You will work shoulder‑to‑shoulder with model researchers, engineers, and red teamers. You will personally build evaluation frameworks, define security benchmarks, and drive decisions about what to ship and what to hold. This is a small team with high ownership – you will see your work in production and be accountable for outcomes.

• Own the model security roadmap:
  Define and prioritize the security hardening strategy for our frontier models across the full OWASP LLM threat surface — prompt injection (direct and indirect), data exfiltration, jailbreak resistance, system prompt leakage, training data extraction, and adversarial manipulation of agentic workflows.
• Drive zero‑day and exploit defense:
  Work with researchers to evaluate and mitigate the risk of models being used to generate zero‑day exploits, malware, or novel attack vectors. Define thresholds, build evaluation datasets, and own the decision framework for what the model should and should not be capable of in the security domain.
• Build and scale red‑teaming frameworks:
  Design, run, and iterate adversarial testing programs — both automated and human‑driven — to continuously probe model vulnerabilities. Establish metrics (e.g., jailbreak success rate, injection bypass rate, exfiltration resistance) and drive measurable improvement over time.
• Partner with Microsoft Security product teams:
  Work closely with Azure Security and Security Copilot teams to translate their product requirements into model training priorities. Ensure our models are purpose‑built for threat detection, incident triage, vulnerability assessment, log analysis, and compliance reasoning.
• Define security‑specific model evaluations:
  Build benchmark suites and evaluation frameworks that measure real‑world security usefulness — not just academic performance. Drive training data strategy to improve domain‑specific model quality for security practitioners.
• Shape security policy and launch readiness:
  Establish clear security criteria for model launches. Own the security dimension of go/no‑go decisions, with frameworks that balance capability, risk, and deployment context.
• Stay at the frontier:
  Track the rapidly evolving LLM security…