Overview
The Security Compete team helps Microsoft Security win. We turn competitive evidence into sharper positioning, field guidance, go-to-market choices and product input across four pillars: Get Ready for AI, Securing AI, Defend with AI and Securing Data. We partner with product and engineering to shape what we build, so market insight becomes a better product, not just better messaging. From leadership setting strategy to sellers in a live deal, we get people the insight they need to decide and win. AI helps us move at market speed, and our experts stay accountable for every call.
AI is writing more code than security teams can review, and attackers are using AI to find what slips through. Application security is moving from static findings to agents that discover, validate, and fix real risk across code, pipelines, and cloud, and every major AppSec and cloud security vendor is racing to lead it.
This role sits at the center of that shift, helping Microsoft turn fast-moving competitive evidence into sharper product and go-to-market decisions across modern AppSec, AI code security, and code-to-cloud. It will help position application and code security as an integral part of Microsoft’s end-to-end security capabilities, connecting risk and remediation from development through runtime. The scope includes MDASH, Microsoft Security’s multi-model agentic system for finding, validating, and fixing vulnerabilities, in close partnership with GitHub, Defender, and exposure management teams.
Responsibilities
Competitive insight on AI-era application security
AppSec, ASPM, CNAPP, and software supply chain vendors are investing to move from findings to fixes with AI. You’ll track how platform and specialist competitors are evolving across code security, reachability and exploitability, and code-to-cloud risk, and what that means for Microsoft.
Shape Microsoft’s AppSec direction
You’ll turn competitive insight into clear recommendations on where Microsoft should invest, what product gaps to close, and how to differentiate in the market. Your point of view will be grounded in customer evaluations, win/loss analysis, field feedback, and market and analyst input.
Field guidance for competitive evaluations
You’ll build the vendor analyses, technical briefs, and battlecards sellers use in AppSec and code-to-cloud evaluations, and support priority deals where competitive insight can change the outcome, using AI to keep pace with the market while staying accountable for accuracy.
Required/minimum qualifications
Master's Degree in in Marketing, Computer Science, Business or related field AND 3+ years experience in business OR Bachelor's Degree in Marketing, Computer Science, Business or related field AND 5+ years experience in business OR equivalent experience.
Additional or preferred qualifications
Master's Degree in Marketing, Computer Science, Business or related field AND 6+ years experience in business OR Bachelor's Degree in Marketing, Computer Science, Business or related field AND 8+ years experience in business OR equivalent experience.
Technical depth in code and application security, such as secure development, static and dynamic analysis, vulnerability triage and prioritization, threat modeling, and developer remediation workflows. Experience with CNAPP or exposure management, especially where AppSec findings connect to runtime reachability, exploitability, and attack paths, is a plus.
Familiarity with AI-assisted development and security, including AI coding assistants, AI code review, autofix, AI-assisted application security, and MCP or agent tooling.
Experience with modern delivery pipelines and software supply chain security, including CI/CD platforms, SBOM, provenance, signing, package ecosystem security, or related practices.
Strong competitive intelligence, product marketing, analytical writing, and storytelling skills, with the ability to combine AI-assisted synthesis, public evidence, customer-facing materials, and technical analysis to assess vendor claims.
Public work such as research, CVEs, conference talks, open-source contributions, or technical writing is a plus, as are certifications such as OSCP, OSWE, CSSLP, or cloud security certifications.
Product Marketing IC4 - The typical base pay range for this role across the U.S. is USD $106,400 - $203,600 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $137,600 - $222,600 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.
If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
Insights from previous hires
Top skills: Management, Business Development, Marketing
Common previous titles: Security Product Manager, Product Marketing Manager, Security Marketing Manager, Specialist, Cloud Solution Architect, Account Executive, Technical Program Manager II, Senior Specialist, Senior Security Researcher, Senior Manager
Job description provided by Microsoft.
View the original posting
