Jobs in the United States

25+ jobs

Save this search

Added just now
T
Store Executive Intern (Store Leadership Intern) - St Louis, MO (Starting Summer 2027)
Target
Kirkwood, MO
- $26 to $27 USD / hour
…store. This internship is a paid 40 hr/week, hands-on training program to develop and prepare you for store leadership. As a Stores Executive Intern, you will get a valuable realistic…
Added 1 min ago
Technology Strategy Manager
Bank of America, National Association
United States
The Technology Strategy Manager will support the development and execution of technology strategy across Global Risk Management (GRM) on the Strategic Planning, Operational Excellence and…
Added 1 min ago
Consumer Banking Market Leader
Bank of America, National Association
United States
…completed the Bank of America Academy-led Market Leadership Development…
Added 2 mins ago
Learning Strategy & Advisory Consultant - Insurance
Accenture
Saint Louis, MO
…relationships with your client counterparts at the delivery and program level, and you engage senior stakeholders with confidence when working alongside your Manager or Senior Manager. Your…
Added 3 mins ago
Mergers & Acquisitions Finance and Operations Manager
Deloitte
Kansas City, MO
As an M&A Manager on the M&A I&D Fin & Ops team, you will be responsible for helping clients plan and execute finance integration and separation activities across the transaction lifecycle.…
Added 3 mins ago
Mergers & Acquisitions Finance and Operations Manager
Deloitte
Saint Louis, MO
As an M&A Manager on the M&A I&D Fin & Ops team, you will be responsible for helping clients plan and execute finance integration and separation activities across the transaction lifecycle.…
Added 3 mins ago
Product Manager (Research Computing Platform) onsite
System One
Washington, DC
We are seeking a Senior Product Manager to lead the strategy and development of a cloud-based research computing platform.
Added 4 mins ago
IT PROFESSIONAL - APPLICATIONS (SALESFORCE & DIGITAL MARKETING SPECIALIST)
City of Houston
Houston, TX
…strategies. This role combines Salesforce administration and development expertise with marketing technology, campaign automation, analytics, and customer journey optimization. The ideal…
Added 4 mins ago
Lease Account Executive (Base + Commission)
Gabrielli Truck Sales
Dayton, NJ
The Lease Account Manager is responsible for the development of profitable new customer business and will visit accounts within an assigned sales territory. This position works with minimal…
Added 4 mins ago
C3BM Principal Systems Engineer - Advanced Technologies
Chenega Corporation
Huntsville, AL
Prepare and present explanatory briefings for operators, developers, and executive leaders and assist program manager in all acquisition actions to get contractors on contract, coordinate…
Added 4 mins ago
Senior C-sUAS Operations & Projects Manager
Chenega Corporation
Arlington, VA
We are seeking a highly experienced Senior C-sUAS Operations & Projects Manager to lead Counter-Small Unmanned Aircraft Systems (C-sUAS) operations, programs, capability development,…
Added 4 mins ago
Terminal Modernization Support PM (Onsite)
RTX
United States
Mission Systems is seeking a Program Manager to support Strategic Communications terminal modernization efforts. The program includes hardware and software development, terminal build and…
Added 5 mins ago
Customer Acquisition Manager - Growth & Enablement
Oracle
Jefferson City, MO
…content, speakers, venues, hospitality, transportation, and executive touchpoints are cohesive; and deliver each program on time, on budget, and in compliance with Oracle requirements. The…
Added 6 mins ago
Infrastructure Maturity & Assessment Senior Manager
Accenture
Saint Louis, MO
+ Executive Communication & Commercial Advisory: CIO-level risk-to-opportunity presentation frameworks and strategic positioning to convert baseline assessments into full transformation…
Added 6 mins ago
Transmission Planning Project Manager - 1898 & Co.
Burns & McDonnell
Kansas City, MO
As a Transmission Planning Project Manager, you will be responsible for overseeing all phases of transmission planning projects, from business development through execution. You will manage…
Added 6 mins ago
Director of Academic Support and Accessibility Services
Vaughn College of Aeronautics and Technology
Flushing, NY
Recruit, hire, train, mentor, and evaluate tutors and supplemental instructors, providing ongoing professional development to enhance subject expertise, tutoring effectiveness,…
Added 10 mins ago
M&A Human Capital Diligence Manager
Deloitte
Kansas City, MO
…broader Strategy & Transactions practice. Being a Deloitte Manager in Human Capital Diligence means playing a critical role in helping our clients achieve their Human Resources (HR) M&A…
Added 10 mins ago
Equipment Specialist
Army Tank-Automotive and Armament Command (TACOM)
Texarkana, TX
Added 11 mins ago
Software & Tools Engineering Project Manager
Apple
San Jose, CA
Hardware Engineering is seeking a seasoned Engineering Project Manager to oversee internal software applications development. We're looking for an individual with a demonstrated command of…
Added 11 mins ago
CG
General Manager
Compass Group, North America
Midland, TX
- $80,000 to $85,000 USD / year
…excel as they deliver world-class meals in corporate cafes and executive dining rooms with on-site catering through vending innovations and…
Added 12 mins ago
CES Lead Technical Program Manager
JPMorgan Chase
Plano, TX
As a Lead Technical Program Manager in Consumer & Community Banking - Core Engineering Solutions team, you will drive the successful delivery of complex technology projects and programs…
Added 12 mins ago
Sales Solutions Architect - AV
BlackBox
PLANO, TX
…process, and document results in a needs analysis summary (program report) for client review before detailed design…
Added 12 mins ago
CC
Human Resources Analyst or Senior Human Resources Analyst
Chatham, County of (NC)
Pittsboro, NC
- $33.07 to $44.28 USD / hour
…recruitment and selection, employee relations, job description development and maintenance, employee programs, policy implementation, research and analysis, and special projects. Serves as…
Added 13 mins ago
NB
Senior Data Security & Compliance Manager
NUNA BABY ESSENTIALS INC
Vancouver, WA
- $130,000 to $155,000 USD / year
Report findings and recommendations to Legal, HR, IT, and Executive Leadership.
Added 13 mins ago
Manager, M&A Financial Planning & Analysis
Salesforce, Inc.
GA · IN
…trust with internal partners (e.g., the Salesforce Corporate Development Integration team) and external partners (e.g., the acquired company’s Finance team) throughout the integration…

GitHub, Inc.

Staff Manager, Product Security Response

United States

$144,600 to $383,500 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $144,600 to $383,500 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About GitHub

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

GitHub is transforming how the world builds secure software, and we are looking for a Staff Manager, Product Security Response to lead the team responsible for the last line of defense once vulnerabilities reach GitHub's shipped products: our Product Security Incident Response Team (PSIRT) .

This is a people-management role at the center of GitHub's vulnerability response posture. You will lead an 8-person team covering first-party vulnerability triage and remediation coordination, CVE/CNA operations, and external researcher engagement through HackerOne. You will set the strategy, staffing model, and operational rigor that keeps incident response sustainable as both incident volume and bug bounty submission volume continue to grow sharply year over year, while partnering closely with Legal/CELA, Security Comms, and Microsoft's MSRC to keep scope boundaries clean and response execution credible to regulators and partners.

Responsibilities

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Qualifications

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Compensation Range

The base salary range for this job is USD $144,600.00 - USD $383,500.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive

Manager fundamentals

Model
Coach
Care

Leadership principles

Create clarity
Generate energy
Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are - because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Apply About employer

Report this job