20 hours ago
Base Salary
$108k - $286k/yr
Responsibilities
- Design, build, and maintain security tooling and automation, including static analysis pipelines, secret scanning workflows, and dependency analysis systems.
- Develop scalable solutions that prevent recurring classes of vulnerabilities rather than addressing only individual findings.
- Build and improve agentic security tooling for automated triage, assessment, and remediation of security findings.
- Develop security libraries, CI/CD integrations, and developer-facing tools that make secure development the default.
- Build detection and prevention systems for software supply chain security.
- Collaborate with product and engineering teams to address security risks and define requirements and features.
- Analyze security metrics and KPIs to identify trends, evaluate tooling effectiveness, and recommend improvements.
Requirements
- At least 5 years of experience in security analysis, security research, cybersecurity, security engineering, or a relevant area; alternatives include an associate degree plus 4 years, a bachelor's degree plus 3 years, a master's degree plus 1 year, or equivalent experience.
- At least 1 year of experience building security tooling and implementing solutions in complex environments.
- At least 3 years of programming experience in at least two of Ruby, Go, and Python.
- Preferred: experience with SAST/DAST tools, code-scanning frameworks, or custom rule authoring.
- Preferred: experience building agentic or AI-driven security tooling for automated triage, classification, or remediation.
- Preferred: familiarity with software supply chain security concepts and tooling.
- Preferred: experience with large-scale monolith or distributed service codebases and familiarity with GitHub products and its developer ecosystem.
- Preferred: strong security principles expertise, including the Security Development Lifecycle, and experience in vulnerability management.
Benefits
- Remote-first work arrangement from within the United States.
- Competitive pay, generous learning and growth opportunities, and benefits.
- Certain roles may be eligible for annual bonus, stock, and sales incentives in addition to base pay.
About GitHub
GitHub builds a cloud platform for software development that hosts code repositories, collaboration, and automation, including GitHub Actions, Packages, and Copilot. It sells paid plans and enterprise subscriptions for organizations and developers, plus add-ons and a marketplace. Founded in 2008 and headquartered in San Francisco, it is owned by Microsoft and is widely used by open-source communities and enterprises worldwide.