Jobs in the United States

25+ jobs

Save this search

Added 2 mins ago
Engineering Technician 4
Lam Research
Tualatin
The SEM Lab in Tualatin is committed to providing best-in-class microscopy services to support Lam’s engineering and development efforts. Through technical development and continuous…
Added 10 mins ago
Distribution Center Inventory Control Associate
USA GPC Genuine Parts Company
Manheim, PA
The Inventory Control and Quality Assurance (ICQA) Associate will play a critical role in ensuring inventory accuracy and product quality for NAPA’s automotive parts aftermarket in the…
Added 16 mins ago
GG
Information Technology Manager (46336)
Goodwill Gulf Coast
Mobile, AL
- $31.25 USD / hour
Coach staff to provide excellent customer service and professional support to all internal customers.
Added 16 mins ago
GG
Assistant Manager II (46663)
Goodwill Gulf Coast
Mobile, AL
- $19.75 USD / hour
Ensures World Class donor and customer service is delivered consistently by creating a positive experience for every shopper, donor, and team member.
Added 16 mins ago
GG
Executive Assistant (46636)
Goodwill Gulf Coast
Mobile, AL
- $0.01 USD / hour
Function: Provides confidential administrative support to the President/CEO. Supports the Executive Team as directed, anticipates needs, and tracks decisions, commitments, and priorities…
Added 19 mins ago
TC
ADMINISTRATIVE COURT CLERK, CRIMINAL - County Clerk
Tarrant County
Fort Worth, TX
- $23.36 to $25.7 USD / hour
Added 25 mins ago
FT Associate Optometrist - Hybrid Position - Philadelphia, PA - EyeBuyDirect
Luxottica of America, Inc.
Philadephia, PA
…of frames, Virtual Try-On, convenient delivery options, and customer-first service designed to make shopping for glasses easy and…
Added 34 mins ago
Customer Service Associate I
Dollar Tree Stores INC
West Palm Beach, FL
We’re seeking a Customer Service Associate to join our team and deliver a great shopping experience for every customer. Duties include, but are not limited to, the following:
Added 37 mins ago
Catering Events Manager
Tufts University
Medford, MA
…events in person, staff management and delivering exceptional customer catering service. This integral management for Tufts Catering will train staff to industry standards, fully understand…
Added 38 mins ago
Registered Nurse (RN) - Triage - TCP Pediatric Medical Group
Texas Children\'s
Houston, TX
Systematically assesses and addresses patients’ needs with decision support tools
Added 39 mins ago
End User Computing Architect - Azure Virtual Desktop and VDI - TS/SCI with Polygraph
GD Information Technology, Inc.
United States
Demonstrated technical leadership, mentoring, cross-team conflict resolution, and customer communication.
Added 41 mins ago
Department Secretary (Therapy Services) Century III West Mifflin
Allegheny Clinic
United States
Performs secretarial functions to provide daily operational and administrative support for the department.
Added 41 mins ago
SW
(USA) Tire & Battery Technician - Automotive
Sam's West, Inc.
Las Vegas, NV
- $19 to $27 USD / hour
…developing interpersonal skills for providing safe and efficient customer…
Added 42 mins ago
Associate - Cryptographic Payment Key Management
American Express
Phoenix, AZ
…strategies, delivering global capabilities and services in support of Amex’s customers and colleagues, while maintaining 24/7 servicing and availability to ensure an uninterrupted,…
Added 42 mins ago
Public & Labor Proposal Associate
CVS Health
Remote, United States
The Specialty Sales Support Associate provides pre-sale and post-sale support for specialty benefits business, serving as a liaison between Sales, Underwriting, Implementation, Account…
Added 42 mins ago
Sales Associate
CVS Health
Show Low, AZ
The Retail Store Associate position provides an opportunity, in a leading retail setting, to excel in a growing, high impact, customer focused role, working both independently and as a…
Added 42 mins ago
Jr. Business Development & Estimating Associate
All Things Metal
Surprise, AZ
We are seeking a detail-oriented Junior Business Development & Estimating Associate to support business development efforts through estimating, proposal preparation, customer engagement,…
Added 42 mins ago
Housekeeping Room Attendant
Atrium Hospitality
Glendale, AZ
Customer service mindset – Friendly, helpful attitudes make guest stays memorable (for all the right reasons).
Added 42 mins ago
AB
Sales Associate – Optical - Part Time
America's Best
Scottsdale, AZ
- Part-time
As a Sales Associate, you’ll play a key role in delivering an exceptional experience for our customers while supporting store operations and sales goals.
Added 43 mins ago
Front Desk Associate
Atrium Hospitality
Tucson, AZ
Support and train new front desk team members - you’re the friendly coach they’ll thank later.
Added 43 mins ago
Account Manager Overlay-TEPEZZA- Phoenix District
Amgen
Phoenix, AZ
The Overlay Specialty Account Manager is responsible for providing account management support to accounts within the Phoenix District.
Added 43 mins ago
Account Manager Equipment
Trane Technologies
Phoenix, AZ
Trane is Hiring an Account Manager - Join our Team and Drive Business Growth! Are you passionate about building strong customer relationships and driving revenue growth? Trane, a renowned…
Added 43 mins ago
MC
HTM Imaging Tech II
Mayo Clinic
Phoenix, AZ
- $38.55 to $53.97 USD / hour
Service calls are communicated to the technician through HTM Leadership, HTM Support Specialists, or CMMS dashboard. Emergent calls directly from the customer often require a rapid response…
Added 43 mins ago
MC
HTM Healthcare Engineering Tech I
Mayo Clinic
Phoenix, AZ
- $32.39 to $43.73 USD / hour
Service calls are communicated to the technician through HTM Leadership, HTM Support Specialists, or CMMS dashboard. Emergent calls directly from the customer may require a rapid response…
Added 43 mins ago
IT Support Specialist I
Columbia Bank
Phoenix, AZ
…401(k)-retirement savings plan with employer match for qualifying associate contributions, an employee assistance program, life insurance, disability insurance, tuition assistance, mental…

GitHub, Inc.

Staff Manager, Product Security Response

United States

$144,600 to $383,500 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $144,600 to $383,500 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About GitHub

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

GitHub is transforming how the world builds secure software, and we are looking for a Staff Manager, Product Security Response to lead the team responsible for the last line of defense once vulnerabilities reach GitHub's shipped products: our Product Security Incident Response Team (PSIRT) .

This is a people-management role at the center of GitHub's vulnerability response posture. You will lead an 8-person team covering first-party vulnerability triage and remediation coordination, CVE/CNA operations, and external researcher engagement through HackerOne. You will set the strategy, staffing model, and operational rigor that keeps incident response sustainable as both incident volume and bug bounty submission volume continue to grow sharply year over year, while partnering closely with Legal/CELA, Security Comms, and Microsoft's MSRC to keep scope boundaries clean and response execution credible to regulators and partners.

Responsibilities

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Qualifications

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Compensation Range

The base salary range for this job is USD $144,600.00 - USD $383,500.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive

Manager fundamentals

Model
Coach
Care

Leadership principles

Create clarity
Generate energy
Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are - because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Apply About employer

Report this job