Senior Product Marketing Manager, Competitive Intelligence - Code and Application Security

Competitive insight on AI-era application security

• AppSec, ASPM, CNAPP, and software supply chain vendors are investing to move from findings to fixes with AI. You’ll track how platform and specialist competitors are evolving across code security, reachability and exploitability, and code-to-cloud risk, and what that means for Microsoft.

Shape Microsoft’s AppSec direction

• You’ll turn competitive insight into clear recommendations on where Microsoft should invest, what product gaps to close, and how to differentiate in the market. Your point of view will be grounded in customer evaluations, win/loss analysis, field feedback, and market and analyst input.

Field guidance for competitive evaluations

• You’ll build the vendor analyses, technical briefs, and battlecards sellers use in AppSec and code-to-cloud evaluations, and support priority deals where competitive insight can change the outcome, using AI to keep pace with the market while staying accountable for accuracy.

• Masters Degree in in Marketing, Computer Science, Business or related field AND 3+ years experience in business OR Bachelors Degree in Marketing, Computer Science, Business or related field AND 5+ years experience in business OR equivalent experience., * Masters Degree in Marketing, Computer Science, Business or related field AND 6+ years experience in business OR Bachelors Degree in Marketing, Computer Science, Business or related field AND 8+ years experience in business OR equivalent experience.
• Technical depth in code and application security, such as secure development, static and dynamic analysis, vulnerability triage and prioritization, threat modeling, and developer remediation workflows. Experience with CNAPP or exposure management, especially where AppSec findings connect to runtime reachability, exploitability, and attack paths, is a plus.
• Familiarity with AI-assisted development and security, including AI coding assistants, AI code review, autofix, AI-assisted application security, and MCP or agent tooling.
• Experience with modern delivery pipelines and software supply chain security, including CI/CD platforms, SBOM, provenance, signing, package ecosystem security, or related practices.
• Strong competitive intelligence, product marketing, analytical writing, and storytelling skills, with the ability to combine AI-assisted synthesis, public evidence, customer-facing materials, and technical analysis to assess vendor claims.
• Public work such as research, CVEs, conference talks, open-source contributions, or technical writing is a plus, as are certifications such as OSCP, OSWE, CSSLP, or cloud security certifications.

The Security Compete team helps Microsoft Security win. We turn competitive evidence into sharper positioning, field guidance, go-to-market choices and product input across four pillars: Get Ready for AI, Securing AI, Defend with AI and Securing Data. We partner with product and engineering to shape what we build, so market insight becomes a better product, not just better messaging. From leadership setting strategy to sellers in a live deal, we get people the insight they need to decide and win. AI helps us move at market speed, and our experts stay accountable for every call.

AI is writing more code than security teams can review, and attackers are using AI to find what slips through. Application security is moving from static findings to agents that discover, validate, and fix real risk across code, pipelines, and cloud, and every major AppSec and cloud security vendor is racing to lead it.

This role sits at the center of that shift, helping Microsoft turn fast-moving competitive evidence into sharper product and go-to-market decisions across modern AppSec, AI code security, and code-to-cloud. It will help position application and code security as an integral part of Microsoft’s end-to-end security capabilities, connecting risk and remediation from development through runtime. The scope includes MDASH, Microsoft Security’s multi-model agentic system for finding, validating, and fixing vulnerabilities, in close partnership with GitHub, Defender, and exposure management teams.