Jobs in the United States

25+ jobs

Save this search

Added 1 min ago
Manager - SAP MDG & Master Data
Deloitte
Saint Louis, MO
As a Manager on the SAP team, you will be responsible for helping clients define, implement, and sustain enterprise data governance capabilities across complex SAP environments.
Added 1 min ago
Manager - SAP MDG & Master Data
Deloitte
Kansas City, MO
As a Manager on the SAP team, you will be responsible for helping clients define, implement, and sustain enterprise data governance capabilities across complex SAP environments.
Added 1 min ago
PB
Cloud & Communication Services Manager (Full Time)
PROSPERITY BANK
Lubbock, TX · Sugar Land, TX · Plano, TX
- Full-time
The Cloud & Communications Services Manager leads and directs the team through architecture, planning, design, implementation, and support of the bank infrastructure. The Cloud &…
Added 4 mins ago
C
Truck Technician
CRH
Tulsa, OK
- $20 to $28 USD / hour
Lead and mentor team members during cleaning, assembly, and disassembly operations.
Added 4 mins ago
Wholesale Custom Coordinator
Greyson Clothiers
Detroit, MI
Report To: Wholesale Decoration & Operations Manager
Added 4 mins ago
Senior Consultant - SAP MDG & Master Data
Deloitte
Kansas City, MO
+ Configure and enhance MDG capabilities, including data models, Floorplan Manager (FPM), BRFplus, validations, derivations, workflows, duplicate detection, matching and merging, and…
Added 4 mins ago
Senior Consultant - SAP MDG & Master Data
Deloitte
Saint Louis, MO
+ Configure and enhance MDG capabilities, including data models, Floorplan Manager (FPM), BRFplus, validations, derivations, workflows, duplicate detection, matching and merging, and…
Added 5 mins ago
Account Manager
Tennant Company
Jacksonville, FL
…creating a cleaner, safer and healthier world. With manufacturing, operations and sales, service, and support functions across the globe, your journey at Tennant can take you places you…
Added 5 mins ago
JH
Lead Associate, QA Compliance
Jubilant HollisterStier
Spokane, WA
- $77,969 to $101,200 USD / year
The QA Compliance lead Associate provides support to the company Deviations, Corrective and Preventive Action (CAPA) program through a complete assessment of Root Cause Analysis (RCA) of…
Added 7 mins ago
CG
Environmental Services Manager in Training / Crothall Healthcare, St. Louis Children's Hospital
Compass Group, North America
Saint Louis, MO
- $51,000 to $53,000 USD / year
As an Environmental Services Manager in Training (MIT), you will gain preparation for a potential future role within our support services team leadership. Through this process, you will…
Added 7 mins ago
Program Coordinator - Student Accommodations and Support Services - C99083
EASTERN WASHINGTON
Cheney, WA
The Program Coordinator for Student Accommodations and Support Services will provide office support, student assistance, and accommodation intake oversight. Reporting to the Operations…
Added 8 mins ago
Apartment Manager - Redmond and Maple Valley
YWCA Seattle | King | Snohomish
Redmond, WA
The Apartment Manager is responsible for the day-to-day oversight, monitoring, and upholding of LIHTC-funded affordable housing properties. This position is assigned to provide on-site…
Added 8 mins ago
REGIONAL DIRECTOR OF FOOD OPERATIONS
Compass Group, North America
Jefferson City, MO
As a Regional Director of Operations (RDO), you will provide strategic leadership and operational oversight for a multi-site healthcare food service portfolio across Westchester County, New…
Added 8 mins ago
Infrastructure Advisory & Transformation Senior Manager
Accenture
Saint Louis, MO
We are seeking a highly experienced Senior Manager to join our Infrastructure Advisory & Transformation practice. In this role, you will help clients modernize their technology landscape,…
Added 10 mins ago
CC
Assistant Teacher (Early Childhood Program Specialist 1)
COMMUNITY COLLEGES OF SPOKANE
Spokane, WA
- $19.12 USD / hour
Under general supervision of the Center Manager, the Assistant Teacher supports the Lead and/or Associate Teacher in implementing curriculum and daily operations in Head Start/Early Head…
Added 11 mins ago
AD
Supervisor, Chemistry
Antech Diagnostics
Fountain Valley, CA
- From $75,000 USD / year
Provide business review information to Lab Manager
Added 11 mins ago
AD
Quality Assurance Specialist - Manufacturing (Rockville, MD)
Antech Diagnostics
Rockville, MD
- $63,000 to $79,000 USD / year
The Quality Assurance Specialist supports daily Quality Assurance and compliance operations across manufacturing, distribution, and biobank facilities. Working under general supervision…
Added 11 mins ago
Corporate Administration Project Manager
Sakata Seed America, INC.
Woodland, CA
Job Summary: The Corporate Administration Project Manager leads the execution of Executive Office projects and supports corporate governance administration at Sakata Seed America (SAH). The…
Added 13 mins ago
Business Office Manager
Fairfax, VA
The Business Office Manager supports the Intercollegiate Athletics staff in day to day activities ensuring smooth operation of the department. Duties include but are not limited to the…
Added 16 mins ago
Clinical Skills Trainer
VNA of the Treasure Coast
Vero Beach, FL
…Home Health clinicians. Working under the Clinical Education Manager and in coordination with the Clinical Educators and operational leaders, the position supports safe readiness for…
Added 17 mins ago
Family Care Coordinator Associate - ECLIPSE
Catholic Charities Serving Central Washington
Yakima, WA
The Family Care Coordinator Associate is responsible for case management including home visits and classroom support, as well as program support including recruitment and transportation…
Added 17 mins ago
Associate Director - Facilities and Maintenance
Catholic Charities Serving Central Washington
Yakima, WA
Oversees facilities operations, construction management, and life-safety programs for Catholic Charities Housing Services (CCHS), affiliated organizations, and contracted third-party…
Added 17 mins ago
MH
Community Manager (Oroysom Village, Avelina)
MidPen Housing
Fremont, CA
- $28.46 to $32.02 USD / hour
You'll oversee the daily operations of one or more affordable housing properties while making a direct impact on residents' lives. Reporting to the Property Manager, you'll lead a small…
Added 19 mins ago
Assistant Store Manager - Famous Footwear
Famous Footwear
BRANSON, MO
Ace Retail Operations & Support Staffing Levels: You’ll know retail operational fundamentals like the back of your hand and put in the work so the store runs like a tightly laced sneaker.…
Added 21 mins ago
WM
S.C.A.D.A. Supervisor (Working Title)
Western Municipal Water District
Riverside, CA
- $58.88 to $87.64 USD / hour
Under the direction of the Operations Field Manager - Automation & Electrical Services, this position plans, coordinates, assigns, and inspects highly skilled work across the District’s…

GitHub, Inc.

Staff Manager, Product Security Response

United States

$144,600 to $383,500 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $144,600 to $383,500 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About GitHub

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

GitHub is transforming how the world builds secure software, and we are looking for a Staff Manager, Product Security Response to lead the team responsible for the last line of defense once vulnerabilities reach GitHub's shipped products: our Product Security Incident Response Team (PSIRT) .

This is a people-management role at the center of GitHub's vulnerability response posture. You will lead an 8-person team covering first-party vulnerability triage and remediation coordination, CVE/CNA operations, and external researcher engagement through HackerOne. You will set the strategy, staffing model, and operational rigor that keeps incident response sustainable as both incident volume and bug bounty submission volume continue to grow sharply year over year, while partnering closely with Legal/CELA, Security Comms, and Microsoft's MSRC to keep scope boundaries clean and response execution credible to regulators and partners.

Responsibilities

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Qualifications

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Compensation Range

The base salary range for this job is USD $144,600.00 - USD $383,500.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive

Manager fundamentals

Model
Coach
Care

Leadership principles

Create clarity
Generate energy
Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are - because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Apply About employer

Report this job