Principal Product Manager, AI Investigations & Integrity - CoreAI

Are you an investigator who uses data to understand how AI systems are misused—and turn investigative findings into platform safeguards? If so, you may be a strong fit for this nontraditional Product Manager role, focused on hands-on investigation and applied data science. 

You will investigate misuse across models, applications, and agentic workflows, including Azure AI Foundry, and partner across engineering, research, security, and integrity to turn findings into safeguards that reduce risk without blocking legitimate use. 

• Investigate AI misuse and adversarial behavior across enterprise AI services, including prompt injection, jailbreaks, adversarial distillation, and coordinated abuse, from initial signal through a defensible assessment of behavior, impact, risk, and attribution. 

• Use Python and SQL, Kusto, or comparable tools to analyze complex model, application, and agent telemetry, reconstruct activity, connect signals across datasets, and uncover patterns missed by isolated events or aggregate metrics. 

• Document evidence, methods, findings, limitations, and confidence so others can reproduce the analysis and make informed mitigation decisions. 

• Evaluate and improve detection quality across coverage, false positives, missed abuse, and customer impact. Investigate failures with engineering and research partners and apply lessons from post-deployment monitoring. 

• Turn investigation findings into detection requirements, mitigation priorities, and operational improvements. Balance risk reduction, feasibility, and impact on legitimate users while partnering to ship protections and measure their effectiveness. 

Required Qualifications 

• Bachelor’s Degree AND 8+ years of experience in product/program management, AI investigations, applied data science, trust and safety, security research, intelligence analysis focused on technical threats, national security technical investigations, or related technical disciplines OR equivalent experience. 

Other Requirements

• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years

Preferred Qualifications

• Hands-on experience using applied data science or related technical skills to investigate AI misuse, adversarial behavior, AI safety or security incidents, or closely related technology abuse. 
• Relevant intelligence analysis or national security technical investigations may qualify when they involve complex data, adversarial behavior, and emerging technical threats. 
• Experience assessing incomplete or conflicting evidence, testing competing hypotheses, coordinating investigations, communicating findings and confidence, and distinguishing misuse from legitimate use. 
• Applied data science experience using Python and SQL, Kusto, or comparable tools to analyze complex telemetry and datasets. 
• Experience translating investigations and analysis into shipped protections or operational improvements with cross-functional partners. 
• Ability to turn evidence into actionable requirements and priorities and assess whether resulting changes improve outcomes. 
• Strong command of AI and AI-assisted development tools, including command-line interfaces (CLIs). 
• You live and breathe AI and AI safety, and have a strong guiding principle of making it easier for our customers to make AI useful and harder for the bad guys to abuse AI. 
• Experience investigating frontier AI or agentic systems, including attacks across model, application, tool, or data boundaries, and understanding how deployment context affects behavior and safeguard effectiveness. 
• Experience investigating misuse involving enterprise AI applications, data, and hyperscale inference platforms. 
• Experience building reproducible investigative workflows, evaluation datasets, or analytical tools that improve investigation quality and efficiency, while guiding peers through difficult technical questions and contributing hands-on analysis. 
• Experience with AI security testing, red teaming, post-deployment safety monitoring, or incident response, including measuring detection performance and validating mitigations against evolving adversarial behavior. 
• Experience with content authenticity, provenance, enterprise data protection, or governance in complex systems, and translating investigative findings into product and operational decisions across organizational boundaries. 

Product Management IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.