Vineet Gajarmal

About Vineet Gajarmal

I’m a Security Program Manager at Microsoft with a passion for building secure-by-design systems and driving engineering excellence at scale. With a strong foundation in security governance, incident response, and secure development lifecycle (SDL) practices, I lead cross-functional initiatives that strengthen Microsoft’s security posture and operational resilience.As the Governance Champion for the Secure Future Initiative (SFI) in E+P Services, I’ve led the execution of compliance and risk reduction strategies across critical services—aligning engineering teams with CyberEO, Privacy, and Accessibility mandates. I’ve driven KPI delivery, risk dashboard integration, and executive reporting to ensure measurable security outcomes.In parallel, I serve as the Product Owner for OneFuzz, Microsoft’s open-source fuzzing-as-a-service platform. I’ve shaped its roadmap, modernized its UI, and delivered features like crash triage, job ownership controls, and telemetry integration—empowering developers to adopt fuzzing as a core SDL practice.I’ve also led engineering excellence for OneResponse, Microsoft’s internal incident response platform, where I prioritized reliability-focused improvements, enabled SSIRP readiness, and drove automation for threat detection and response.My work bridges strategy and execution, enabling secure innovation through collaboration, clarity, and a relentless focus on impact.

Experience

1. Security Program Manager

   Microsoft

   Dec 2023 — Present · IN

   GOVERNANCE CHAMPION FOR SECURE FUTURE INITIATIVE (SFI)-> Governance Champion for Secure Future Initiative (SFI) in Azure Platform Teams within Microsoft. Led the execution of SFI across Teams, ensuring alignment with Microsoft\'s core security principles—secure by design, secure by default, and secure operations. supporting 50+ Services, providing real-time visibility into 115+ KPIs. PRODUCT OWNER FOR FUZZING PLATFORM-> Microsoft’s internal fuzzing orchestration platform. Led the evolution of https://github.com/microsoft/onefuzz, Microsoft’s open-source fuzzing orchestration platform, enabling scalable, automated fuzz testing across Windows, Office, and Azure services. Oversaw roadmap delivery, ATTACK SURFACE INTELLIGENCE PLATFORM -> Leading a role-based platform enabling security engineers, developers, and leadership to visualize, validate, and manage attack surfaces across Microsoft service helping Windows Internal Components find Attack surfaces.OWNED PRIORITIZATION MODEL -> Owned Model for prioritization across services in Microsoft to align security engagements in every SEMESTER spanning RED Teaming, Application Security, Threat Modelling, Infra Security, and more by gathering insights on each Service from multiple partners, getting them into single pane and scoring based on Security and other METADATA aspects. OWNED ONERESPONSE’S ENGINEERING EXCELLENCE->(An incident Response Product); prioritized reliability-focused improvements and tracked delivery across Partner Team in creating Detections and responding for SSIRPs Drove team clarity by resolving requirements gaps, documenting decisions, and facilitating definitions of done/ready during redesigns. Partnered cross-functionally with engineering teams internally to resolve blockers and drive integration strategy.

Education

• Kendriya Vidyalaya

  Bachelor's degree, Computer Science

• Central Board of Secondary Education

  Bachelor's degree, Computer Science

  2007 — 2010

• Central Board of Secondary Education

  Bachelor's degree, Computer Science