New

Gaming Senior Principal, Application & Product Security

Microsoft
$163,000.00 - $296,400.00 / yr
United States, California, Los Angeles
Jan 14, 2026
Overview Microsoft is committed to ensuring that we develop and deploy our AI (Artificial Intelligence) technologies in ways that uphold our AI principles and warrant people's trust. Here in Microsoft Gaming, we are on a mission to bring the joy and community of gaming to everyone on the planet. We deliver on that vision by putting players at the center, enabling you to play the games you want, with the people you want, anywhere you want. Gaming Player Services and Operations is at the heart of our ambition to reach billions of players across the globe, ensuring that every player feels included and engaged across Xbox. We do this through our commitment to driving operational excellence through innovation and ensuring player and partner delight across Microsoft Gaming. The Gaming Security team is dedicated to securing the joy of gaming by creating a secure and inclusive environment for players. Our mission is to safeguard assets, protect customer data, and ensure a secure play experience through collaboration with stakeholders. We utilize AI and automation to enhance threat detection and response capabilities, thereby improving efficiency and reducing operational resources. Our strategy focuses on standardizing security solutions across departments, fostering a culture of innovation, collaboration, and continuous improvement. By championing transparency, compliance, and responsible AI use, the Gaming Security team aims to build a robust security posture and maintain player trust. We are looking for a Gaming Senior Principal, Application & Product Security to help protect our players and help ensure a secure entertainment experience. This role will be tasked with building our Developer Enablement pillar focused on helping our development teams shift left on Security. It will drive initiatives related to the understanding of why vulnerabilities occur and help to eliminate vulnerabilities classes from our portfolio through close partnership with development teams, as well as building out secure code libraries, building tooling and automation that facilitates secure practices. As a Gaming Senior Principal, Application & Product Security in Gaming Security, you aren't just securing code; you are protecting the joy, trust, and safety of billions of players worldwide. You will be joining a team that operates at the cutting edge of technology-where Cloud, AI, and Gaming converge. The Gaming Senior Principal, Application & Product Security will have passion for gaming, security, and collaborating with development teams. Besides strong collaboration skills, this person must also possess considerable technical depth, coupled with the ability to bring others together in building cross-organization solutions. Effective communication skills and the ability to thrive in an ambiguous and dynamic environment are necessary. Candidates should represent the growth mindset and display Microsoft cultural values in day-to-day activities. Responsibilities Strategic Leadership for Developer Enablement:Define and execute the long-term roadmap for the Developer Enablement pillar, ensuring security integrates seamlessly into the high-velocity development cycles of game studios withoutimpactingperformance or release timelines. Elimination of Vulnerability Classes:Drivecross-organizational efforts to analyze recurring vulnerability trends and drive the systemic eradication of entire classes of vulnerabilities (e.g., XSS, Injection) through architectural changes rather than whack-a-mole bug fixing. Paved-Road Tooling Architecture:Architect and oversee the implementation of "paved road" security tooling and automation thatintegrate;ysdirectly into CI/CD pipelines, making the secure path the easiest path for developers. Secure Code Library Management:Direct the development and maintenance of centralized, secure-by-default code libraries and SDKs (handling cryptography, authentication, etc.) for game teams to consume, reducing the cognitive load on developers. Root Cause Analysis & Feedback Loops:Establishrigorous root cause analysis processes foridentifiedsecurity defects and feed these insights back into the Software Development Life Cycle (SDLC) to update training, tooling, and policy. Security Champions Program:Support therecently launched"Security Champions" community embedded within individual game studios to scale security culture, ensuring peer-to-peer advocacy and rapid adoption of security practices. Scalable Threat Modeling:Collaborate with existing team members on theevolution ofthe threat modeling process by creating scalable, self-service frameworksand AI agentic capabilitiesthat allow engineering teams toidentifydesign-level flaws early in the pre-production phases. Metric-Driven Governance:Define, track, and report on Key Performance Indicators (KPIs)regardingcode maturity and vulnerability reduction, translating technical data into risk insights for executive leadership. Cross-Domain Collaboration:Act as the primary bridge between the Central Security organization and Game Studio technical directors, ensuring security requirements are translated into actionable engineering backlog items. Innovation & AI Integration:Evaluate and implement emerging technologies (such as AI-driven code analysis or automated remediation) to modernize the application security portfolio and increase the speed of detection and fix. Qualifications Required Qualifications Doctorate in Statistics, Mathematics, Computer Science, or related field AND 5+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response OR Master's Degree in Statistics, Mathematics, Computer Science, or related field AND 6+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response OR Bachelor's Degree in Statistics, Mathematics, Computer Science, or related field AND 8+ years experience in software development lifecycle, large-scale computing, threat modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), or operations incident response OR equivalent experience. 3+ years people management experience. Preferred Qualifications: 12+ years of experience in Cybersecurity, Software Engineering, or Product Security, with at least 5 years serving in a technical leadership capacity (Principal level or above), driving security strategy in large-scale environments. Proficiency in at least one modern programming language (e.g., C++, C#, Python, Go, or Rust) with a history of writing production-quality code or security automation tools. Proven track record of designing and implementing "Shift Left" initiatives that integrate security tooling (SAST/DAST/SCA) directly into CI/CD pipelines (e.g., Azure DevOps, GitHub Actions, Jenkins) with minimal developer friction. Understanding of security technologies, tools, and best practices, including secure coding practices, application security frameworks, threat modeling, risk assessments, and incident response. Written and verbal communication with the ability to partner for success across all levels of the organization and varying technical depths. Customer-first, business-savvy, and holds a growth mindset to uphold our culture and values. Demonstrated experience and success in senior technical leadership roles, such as Application Security Leader or Product Security Leader, at global organizations of similar or greater scale. 5+ years of experience building a modern application security program with a focus on shifting left to integrate security early into the SDLC process. Proventrack recordof promoting and collaborating with development teams on secure development, ensuring vulnerabilities are reduced through theutilizationof resources such as secure code libraries. Proventrack recordof addressing security vulnerabilities through root cause analysis and the development ofappropriate programsto drive successful remediation thateliminatesvulnerability classes. Ability to translate complex technical information into strategic insights for technical leaders and simplify it for senior business leaders. Organizational, project management, communication, and stakeholder management skills with experience in developing, tracking, and reporting KPIs. Security Operations Engineering M6 - The typical base pay range for this role across the U.S. is USD $163,000 - $296,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $220,800 - $331,200 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.