Jobs in the United States

25+ jobs

Save this search

Added just now
CG
Hospital Environmental Services Training & Development Manager
Compass Group
Chicago, IL
- $70,000 to $80,000 USD / year
Lead manager training and leadership development initiatives to support long-term retention and promotion.
Added just now
Vice President - Tesla Brand Manager
JPMorgan Chase
Tempe, AZ
Prepare client-facing presentations and reports, meeting agendas, and records of key program decisions with the OEM partner, making sure they follow contractual requirements.
Added just now
CASE MANAGER 3
State of Arizona
TUCSON, AZ
…and highly motivated individual to join our team as a Case Manager 3. DDD provides individuals with developmental disabilities, and their families, services and supports that are flexible,…
Added just now
O
Principal Program Manager - OCI Product Marketing
Oracle
Phoenix, AZ
- $90,100 to $209,500 USD / year
We are looking for a strategic Program Manager (IC4) to establish and run the operating model for business-critical OCI Web and Oracle AI World programs. This role brings sustained…
Added just now
Principal Aftermarket Technical Product Manager
GE Aerospace
Phoenix, AZ
As Principal Technical Product Manager – Aftermarket, you will own the product vision, strategy and roadmap for the digital solutions that support the Service & Repair value streams in…
Added 1 min ago
Digital Technical Product Manager Lead - Omni Modernization
USAA
Phoenix, AZ
We are seeking a dedicated Digital Technical Product Management Lead – Omni Modernization.
Added 1 min ago
Senior Broker Relationship Manager - Small Commercial
Travelers Insurance Company
Phoenix, AZ
Wellness Program: The Travelers wellness program is comprised of tools, discounts and resources that empower you to achieve your wellness goals and caregiving needs. In addition, our mental…
Added 4 mins ago
Offer Manager
Jobgether
Remote, United States
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Offer Manager based in the United States.
Added 4 mins ago
External Audit Consultant
Jobgether
Remote, United States
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an External Audit Consultant based in the United States.
Added 4 mins ago
J
Director, Employee Relations
Jobgether
Remote, United States
- $155,000 to $175,000 USD / year
Lead, coach, and develop a team of five professionals, including a Senior Employee Relations Case Manager, Employee Relations Case Managers, and an ER Intake Coordinator.
Added 31 mins ago
Oracle HCM Platform Manager
QualityAI
Santa Clara, CA
This is a hands-on platform operations and lead analyst role with responsibility for building out an internal HCM team and leading the Application Managed Services (AMS) partner. The…
Added 36 mins ago
O
Senior Manager, Systems Software Engineering
Oracle
United States
- $146,300 to $306,400 USD / year
We are seeking a Senior Manager, Systems Software Engineering to lead the strategy, delivery, and operational excellence of enterprise device-management systems and services. This role owns…
Added 1 hour ago
J
SENIOR NETWORK SECURITY ENGINEER
Jobgether
Remote, United States
- $120,000 to $140,000 USD / year
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Network Security Engineer based in the United States.
Added 1 hour ago
USPACOM Group Lead
The MITRE Corporation
Honolulu, HI
…security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest.…
Added 1 hour ago
Sr Program Specialist - Construction, Fire or BAS Background
Honeywell Technologies
Jefferson City, MO
+ Partner with the FAA Sr. Program Manager, project managers, and customers to resolve project challenges and support successful program execution.
Added 1 hour ago
SF
IVF Nurse Manager
Spring Fertility
San Francisco, CA
- $135,000 to $165,000 USD / year
The IVF Nurse Manager –provides clinical, operational, and people leadership across all clinical nursing services and patient navigation functions within fertility and specialty care…
Added 1 hour ago
CORPORATE EXECUTIVE CHEF - Eastern PA or New Jersey
Compass Group, North America
Joplin, MO
Morrison Healthcare , a Compass Healthcare company, is a leader in healthcare food and nutrition services company, serving more than 1,000 hospitals and healthcare systems across the…
Added 1 hour ago
Registered Nurse Case Manager (RN)
Hospice of New Mexico
Albuquerque, NM
Collaborative Care Champion: Partner closely with our Clinical Director to assess the eligibility and suitability of clients for our specialized hospice services. Your expertise will guide…
Added 1 hour ago
Manager Information Technology 3
Northrop Grumman
Linthicum Heights, MD
Northrop Grumman’s Chief Information and Digital Office (CIDO) is seeking an Information Technology Manager (M3) to lead the CIDO Engineering Digital Solutions organization in support of…
Added 1 hour ago
M
Business Travel Account Manager
Marriott
Bethesda, MD
- $23.99 to $38.41 USD / hour
…Maintain mostly telephonic relationship with each accounts’ Hotel Program Manager, Travel Management Company, pricing intermediary, and other buyers globally who impact the accounts’ BT…
Added 1 hour ago
EG
Operations - Process Manager - Sr
Eliassen Group
Annapolis, MD
- $55 to $65 USD / hour
Our client seeks a senior process manager to lead Script Governance to ensure Intent = Execution for internal and legacy backbook scripts from a recent acquisition. The role will coordinate…
Added 1 hour ago
CO
Accountant, Principal
City of Seattle
Seattle, WA
- $54.01 to $62.9 USD / hour
The Human Services Department (HSD), a department of the City of Seattle, funds and operates programs and services that meet the basic needs of the most vulnerable people in our community –…
Added 1 hour ago
Lead Technical SEO Manager
Zoom
Helena, MT
Lead the technical SEO roadmap and execution across Zoom's global web ecosystem, owning high-priority initiatives driven by SEO analysis, audits, crawl data, search performance data, server…
Added 1 hour ago
Department Manager - Irrigation/Hardscapes Knowledge Preferred
SiteOne Landscape Supply
Memphis, TN
Free Counseling Services/Employee Assistance Program
Added 1 hour ago
Manager, Software Engineering
Plansource
UNAVAILABLE
Partner with senior and lead engineers to reinforce consistent technical standards across teams.

GitHub, Inc.

Staff Manager, Product Security Response

United States

$144,600 to $383,500 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $144,600 to $383,500 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About GitHub

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

GitHub is transforming how the world builds secure software, and we are looking for a Staff Manager, Product Security Response to lead the team responsible for the last line of defense once vulnerabilities reach GitHub's shipped products: our Product Security Incident Response Team (PSIRT) .

This is a people-management role at the center of GitHub's vulnerability response posture. You will lead an 8-person team covering first-party vulnerability triage and remediation coordination, CVE/CNA operations, and external researcher engagement through HackerOne. You will set the strategy, staffing model, and operational rigor that keeps incident response sustainable as both incident volume and bug bounty submission volume continue to grow sharply year over year, while partnering closely with Legal/CELA, Security Comms, and Microsoft's MSRC to keep scope boundaries clean and response execution credible to regulators and partners.

Responsibilities

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Qualifications

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Compensation Range

The base salary range for this job is USD $144,600.00 - USD $383,500.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive

Manager fundamentals

Model
Coach
Care

Leadership principles

Create clarity
Generate energy
Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are - because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Apply About employer

Report this job