Jobs in the United States

25+ jobs

Save this search

Added just now
CO
Temporary Animal Services Representative
County of Riverside
San Jacinto, CA
- $22.17 to $28.59 USD / hour
The County of Riverside’s Human Resources Temporary Assignment Program (TAP) is seeking a Temporary Animal Services Representative to support the Animal Services Department in San Jacinto.
Added 1 min ago
PW
Copy Of Territory Sales Manager Northeast IN (Ft. Wayne)
Purple Wave, Inc.
Huntington, IN
- $70,000 to $100,000 USD / year
…online auction sales and used equipment as our Territory Sales Manager. Surrounded by a powerhouse team of passionate professionals, you'll dive headfirst into the realm of unlimited…
Added 2 mins ago
General Manager(06081) - 21 Church St.
Domino's
Prince Frederick, MD
Direct Reports: Assistant General Manager, CSRs, Pizza Makers and Delivery Experts
Added 5 mins ago
Senior Power Systems Electrical Engineer
Honeywell Technologies
Baltimore, MD
…expert for the University of Maryland (UMD) NextGen Energy Program Public-Private Partnership (P3). In this role, you will be responsible for all electrical, instrumentation, and control…
Added 5 mins ago
Manager Computer Systems Analysis 1
Northrop Grumman
Baltimore, MD
The Northrop Grumman Classified Solutions team is seeking an experienced Manager Computer Systems Analysis 1 to support information system lifecycle activities. The selected candidate will…
Added 5 mins ago
Endoscopy Clinical Specialist
Medtronic
Baltimore, MD
…healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first - developing…
Added 5 mins ago
Registered Nurse - Patient Safety Manager
Veterans Affairs, Veterans Health Administration
Baltimore, MD
Added 6 mins ago
Registered Nurse (Interventional Radiology) Per Diem
Northwell
United States
…evaluation of patient care. Collaborates with physicians and other health team members in coordinating and implementing procedures and treatments. Uses leadership skills/clinical judgment…
Added 7 mins ago
CO
Administrative Services Analyst - Public Works
City of Oxnard
Oxnard, CA
- $37.59 to $61.62 USD / hour
Assist with developing and evaluating plans, work processes, systems and procedures to achieve annual goals, objectives and work standards for the Public Works Department
Added 7 mins ago
Senior Manager of Integrated Communications
Amro Fabricating Corporation
United States
…nearly 50 years of success, we deliver Payload & Protection Systems, Aero/Hydrodynamic Interstage Systems, and Propulsion & Launch Systems to more than 80 prime contractors supporting over…
Added 8 mins ago
T
Information Security Engineer
TTEC
Santa Fe, NM
- $65,000 to $70,000 USD / year
You’ll report to the Information Security Manager. Your role is impactful as it protects TTEC from data loss and security events.
Added 8 mins ago
Project Leader Middletown RI
Serco
Cannon AFB, NM · Albuquerque, NM
…the PC-Based Open-Architecture for Reconfigurable Training Systems (PORTS) program. The PORTS team designs and develops simulation-based training devices/systems for the US Surface Navy to…
Added 13 mins ago
Branch Manager 4 - Evanston, IL
U.S. Bank National Association
Evanston, IL
- Solid understanding of retail product philosophy, including policies, procedures, documentation, and systems
Added 14 mins ago
TJ
Lead Program Assistant
The J
St. Louis, MO
- Up to $20 USD / hour
The Lead Program Assistant position is responsible for overseeing and supervising a team of Program Assistants (DSP) who provide personalized services for our Connections and /or IN…
Added 14 mins ago
Patient Care Technician Preceptor - PCT - Dialysis
Fresenius Medical Care
W Des Moines, IA
Functions as part of the dialysis health care team in providing safe and effective dialysis therapy for patients under the direct supervision of a licensed nurse in accordance with…
Added 14 mins ago
GR
Physical Therapy Assistant (PTA) | 40 hours per week | Rehab Services
Great River Health Systems
West Burlington, IA
- From $22.86 USD / hour
…and visitors. Performs within the prescribed limits of the health system's Ethics and Compliance program. Responsible to detect, observe, and report compliance variances to immediate…
Added 14 mins ago
Student Recruiter III
Iowa State University
Ames, IA
Improve Recruitment Operations: Provide guidance on recruitment systems, staff training, communication practices, and process improvements to ensure consistent, responsive, and effective…
Added 14 mins ago
Postdoctoral Research Associate, Child Welfare Research
Iowa State University
Ames, IA
Department/Program & College Description:The Department of Human Development and Family Studies (HDFS) in the College of Health and Human Sciences at Iowa State University is dedicated to…
Added 14 mins ago
Manager Building Services
Iowa State University
Ames, IA
…Innovation Center is seeking a collaborative, forward-thinking Manager Building Services to oversee the people, technology, equipment, and daily operations of several innovative…
Added 14 mins ago
SH
Resident Services Technician
Sacramento Housing and Redevelopment Agency
Sacramento, CA
- $21.98 to $29.45 USD / hour
…RECEIVED/EXERCISED:• Receives direct supervision from the Supervisor or Program Manager.• May receive lead direction and or functional guidance from higher level staff• May exercise…
Added 16 mins ago
Business Development & Field Innovation Manager
Motorola Solutions, Inc.
Remote, United States
…technically grounded Business Development & Field Innovation Manager to drive growth and market expansion across our Go-To-Market (GTM) portfolio. Unlike traditional sales or business…
Added 17 mins ago
Software Engineering Manager for Cloud, DevOps & AI
Daimler Truck North America LLC
Portland, OR
Benefits include annual variable pay bonus program; eligible for the use of a company vehicle; 401k company contribution with company match up to 8% as well as non-elective company…
Added 20 mins ago
SL
Office Manager, International Student Services
Salt Lake Community College (UT)
Salt Lake City, UT
- $60,147.47 to $65,377.69 USD / year
The Office Manager serves as the primary coordinator for office systems, customer service operations, student employee programs, health insurance administration, scheduling, purchasing,…
Added 24 mins ago
Manager Electronics Engineering
CORP-Corporate Office
United States
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our…
Added 24 mins ago
Manager Programs 2
CORP-Corporate Office
United States
Northrop Grumman’s Aeronautics Systems sector is seeking a Program Manager 2 to lead supplier integration in support of Test and Evaluation. This role will coordinate the delivery of…

GitHub, Inc.

Staff Manager, Product Security Response

United States

$144,600 to $383,500 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $144,600 to $383,500 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About GitHub

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

GitHub is transforming how the world builds secure software, and we are looking for a Staff Manager, Product Security Response to lead the team responsible for the last line of defense once vulnerabilities reach GitHub's shipped products: our Product Security Incident Response Team (PSIRT) .

This is a people-management role at the center of GitHub's vulnerability response posture. You will lead an 8-person team covering first-party vulnerability triage and remediation coordination, CVE/CNA operations, and external researcher engagement through HackerOne. You will set the strategy, staffing model, and operational rigor that keeps incident response sustainable as both incident volume and bug bounty submission volume continue to grow sharply year over year, while partnering closely with Legal/CELA, Security Comms, and Microsoft's MSRC to keep scope boundaries clean and response execution credible to regulators and partners.

Responsibilities

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Qualifications

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Compensation Range

The base salary range for this job is USD $144,600.00 - USD $383,500.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive

Manager fundamentals

Model
Coach
Care

Leadership principles

Create clarity
Generate energy
Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are - because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Apply About employer

Report this job