16 hours ago
Base Salary
$124k - $329k/yr
Responsibilities
- Analyze complex issues using multiple data sources to identify security problems and drive resolution of systemic security issues.
- Lead large-scale security reviews and architectural and design security reviews for feature areas.
- Collaborate with product and engineering teams on security design, development, deployment, risk assessments, design reviews, and threat modeling.
- Identify security issues, tools, mitigations, and processes; manage customer-impacting security issues and drive mitigation adoption.
- Prepare leaders to respond to security threats and translate technical security information for nontechnical audiences.
- Develop secure engineering documentation, guidance, and other security collateral.
- Coach others and share expertise on evolving security practices.
Requirements
- 7+ years of experience in security analysis, security research, cybersecurity, security engineering, software engineering, or a relevant area; alternatively, an associate degree with 6+ years, bachelor's degree with 5+ years, master's degree with 3+ years, doctorate with 1+ year, or equivalent experience.
- At least 1 year of coding or software development experience.
- Preferred: experience with cloud security and modern software development practices.
- Preferred: security certifications such as OSWE or Burp Suite Certified Practitioner, or equivalent.
- Preferred: expertise in security principles, the Security Development Lifecycle, and vulnerability management.
- Preferred: ability to influence others and communicate complex technical security concepts to technical and nontechnical audiences.
Benefits
- Remote-first work arrangement from the United States.
- Competitive pay, benefits, additional rewards including annual bonus and stock for eligible roles, and learning and growth opportunities.
Categories
About GitHub
GitHub builds a cloud platform for software development that hosts code repositories, collaboration, and automation, including GitHub Actions, Packages, and Copilot. It sells paid plans and enterprise subscriptions for organizations and developers, plus add-ons and a marketplace. Founded in 2008 and headquartered in San Francisco, it is owned by Microsoft and is widely used by open-source communities and enterprises worldwide.