Jobs in the United States

25+ jobs

Save this search

Added just now
G
Transportation Engineer
GPAC
Frankfort, KY
- $70,000 to $145,000 USD / year
We are seeking a Transportation Engineer to join a dynamic, multi-disciplinary engineering consulting firm. This individual will contribute to the planning, design, and delivery of…
Added just now
G
Transportation Engineer
GPAC
Georgetown, KY
- $70,000 to $145,000 USD / year
We are seeking a Transportation Engineer to join a dynamic, multi-disciplinary engineering consulting firm. This individual will contribute to the planning, design, and delivery of…
Added 1 min ago
Senior Digital Product Manager, Guest Engagement
Choice Hotels
Scottsdale, AZ
Choice Hotels, one of the world’s largest lodging franchisors, has an exciting new opportunity as our Senior Digital Product Manager, Guest Engagement in the ChoiceHotels.com team.
Added 1 min ago
Sr. Engineering Program Manager - Control Systems
Honeywell Aerospace
Tempe, AZ
This position reports to the Director of Actuation Systems within the Control Systems (CS) Engineering organization. The selected individual will manage a team of actuation engineers…
Added 1 min ago
G
Heavy Civil Project Manager
GPAC
Brookfield, WI
- $90,000 to $140,000 USD / year
We are seeking a skilled Project Manager in the greater Milwaukee area to lead roadway construction, sitework/excavation, and underground utilities projects. The successful candidate will…
Added 1 min ago
G
Heavy Civil Project Manager
GPAC
Sussex, WI
- $90,000 to $120,000 USD / year
We are seeking a skilled Project Manager in the greater Milwaukee area to lead roadway construction, sitework/excavation, and underground utilities projects. The successful candidate will…
Added 1 min ago
G
Heavy Civil Project Manager
GPAC
Pewaukee, WI
- $90,000 to $120,000 USD / year
We are seeking a skilled Project Manager in the greater Milwaukee area to lead roadway construction, sitework/excavation, and underground utilities projects. The successful candidate will…
Added 1 min ago
Confluent - Senior Product Manager, Monetization (Billing Platform & Marketplaces)
IBM
TUCSON, AZ
As a Senior Product Manager in Pricing & Monetization, you'll own pricing and packaging fora set of Confluent offerings, along with the billing platform and marketplaces that turn them into…
Added 1 min ago
O
Principal Program Manager - OCI Product Marketing
Oracle
Phoenix, AZ
- $90,100 to $209,500 USD / year
We are looking for a strategic Program Manager (IC4) to establish and run the operating model for business-critical OCI Web and Oracle AI World programs. This role brings sustained…
Added 1 min ago
Territory Executive - Illinois
PagerDuty
Phoenix, AZ
…rapidly and hiring top talent with leading AI skills across engineering, sales, product, marketing, and beyond as we build the leading digital operations…
Added 1 min ago
CH
Behavioral Scientist, Senior
Cayuse Holdings
Phoenix, AZ
- $160,000 to $175,000 USD / year
Engage with senior government stakeholders to understand complex business needs, translate them into advanced data engineering and analytics objectives, and develop comprehensive strategies…
Added 1 min ago
CH
Data Analyst
Cayuse Holdings
Phoenix, AZ
- $100,000 to $110,000 USD / year
The Data Engineer/Analyst collaborates with clients, data scientists, and software engineers to develop and optimize data pipelines, ETL processes, and database structures that support IRS…
Added 1 min ago
Technical Account Manager
Red Hat
Phoenix, AZ
Professional background in software engineering, specifically with RPM-based Linux and Java technologies
Added 1 min ago
AT
Senior Technical Program Manager
Akamai Technologies, Inc.
Phoenix, AZ
- $119,600 to $215,400 USD / year
As a Senior Technical Program Manager, you will require technical understanding of AI/ML systems, exceptional organizational and program management skills, and proven experience leading…
Added 1 min ago
Technical Project Manager Lead
USAA
Phoenix, AZ
…include technology management or product-forward role (product manager, engineering manager, program…
Added 1 min ago
Senior Lead Engineer
PwC
Phoenix, AZ
…efforts that help clients turn business needs into scalable software solutions across cloud-native and on-premise environments, within our Advisory practice. As a Senior Manager you will…
Added 1 min ago
Cyber Security Manager - Diego Garcia
Amentum
Phoenix, AZ
Amentum, a global leader in advanced engineering, technical, and professional services serving the US government, allies and critical infrastructure sectors, is seeking an FRCS…
Added 1 min ago
Director Product Management
Honeywell Aerospace
Phoenix, AZ · Tempe, AZ
Reporting to the business General Manager, the Director will drive NPI and EIS programmatic excellence. This will include oversight leadership on early life cycle IPDS programs. Therein,…
Added 1 min ago
Manager, GQO – Business Process Continuous Improvement
Otsuka America Pharmaceutical Inc.
Phoenix, AZ
The Manager, GQO – Business Process Continuous Improvement is an important member of Global Quality Operations. This role will play a pivotal role in driving operational excellence through…
Added 1 min ago
Sr Engineering Manager
Honeywell Technologies
Phoenix, AZ
We are seeking a highly experienced Senior Engineering Manager to lead the development of next-generation Connected Software, Cloud Applications, and Industrial Control Systems solutions.…
Added 1 min ago
Electrical Engineer - Power System Protection (Transmission) Job Details | Black & Veatch Family of Companies
Black & Veatch
Phoenix, AZ
…innovation in sustainable infrastructure and our expertise in engineering, procurement, consulting and construction, together we are building a world of…
Added 1 min ago
Lead Engineer
PwC
Phoenix, AZ
…across cloud-native and on-premise environments, using modern engineering approaches, low-code platforms, and a range of programming languages. As a Manager you will lead teams, coach…
Added 1 min ago
Lead Product Manager AI productivity and adoption, Azure
PwC
Phoenix, AZ
As a AI productivity and adoption Manager, you will guide product strategy, shape delivery priorities, and support the development of AI-enabled solutions across the software product…
Added 1 min ago
Senior Strategic Account Manager – Fire Alarm & Monitoring Solutions | Western US
Honeywell Technologies
Phoenix, AZ
Honeywell is seeking an experienced Senior Account Manager to develop and expand strategic customer relationships across the Western United States, with a particular focus on the West Coast.
Added 1 min ago
Principal Systems Engineer - FMS
Honeywell Aerospace
Phoenix, AZ
You will report directly to our FMS Sr. Software Engineering Manager, and you will work at our Phoenix, Arizona location on a hybrid work schedule.

GitHub, Inc.

Staff Manager, Product Security Response

United States

$144,600 to $383,500 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $144,600 to $383,500 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About GitHub

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

GitHub is transforming how the world builds secure software, and we are looking for a Staff Manager, Product Security Response to lead the team responsible for the last line of defense once vulnerabilities reach GitHub's shipped products: our Product Security Incident Response Team (PSIRT) .

This is a people-management role at the center of GitHub's vulnerability response posture. You will lead an 8-person team covering first-party vulnerability triage and remediation coordination, CVE/CNA operations, and external researcher engagement through HackerOne. You will set the strategy, staffing model, and operational rigor that keeps incident response sustainable as both incident volume and bug bounty submission volume continue to grow sharply year over year, while partnering closely with Legal/CELA, Security Comms, and Microsoft's MSRC to keep scope boundaries clean and response execution credible to regulators and partners.

Responsibilities

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Qualifications

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Compensation Range

The base salary range for this job is USD $144,600.00 - USD $383,500.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive

Manager fundamentals

Model
Coach
Care

Leadership principles

Create clarity
Generate energy
Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are - because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Apply About employer

Report this job