Jobs in the United States

25+ jobs

Save this search

Added just now
2027 Spring Health Policy, Research, and Advocacy Internship (Globally Remote, Unpaid)
Global Health Action
Remote, United States
…Intern will provide programmatic, research, and analytical support to the Health Systems Advisor at Global Health Action. S/he will gain valuable knowledge and experience about the complex…
Added just now
Government and Public Sector - Service Delivery Center - Change Management
EY
Alpharetta, GA · Dallas, TX · Jacksonville, FL · San Antonio, TX
- Manage Deployment Change Requests (DCRs), micro Deployment Change Requests (mDCRs), Maintenance Change Requests (MCRs), and Emergency Change Requests (ECRs) for ICAM systems.
Added just now
Personnel Coordinator Bookkeeper
Albertsons Companies
MEDFORD, OR · Medford, OR
Payroll & HR Support: Familiarity with timekeeping systems, payroll processing, and basic HR functions including onboarding and leave tracking.
Added just now
Fluid and Propulsion Design Engineer III - Human Rated Crewed Lunar Lander
Blue Origin LLC
Seattle, WA
This role applies engineering techniques to design, install, modify, analyze, repair and test fluid systems. Development, release, and support of engineering artifacts across the…
Added just now
SF
Senior Software Engineer, AML Engineering
Social Finance LLC
Seattle, WA
- $200,000 to $220,000 USD / year
…effectively. Build and maintain scalable data pipelines to support efficient data processing and analysis. Conduct thorough testing of software components, including unit testing,…
Added just now
Housing Navigator
Hope The Mission
Los Angeles, CA
…in practice. The role calls for strong people skills, solid systems knowledge, and the ability to maintain trust with participants who have often been let down before. Success is not…
Added just now
SF
Software Engineer, AML
Social Finance LLC
Seattle, WA
- $165,000 to $181,500 USD / year
…effectively. Build and maintain scalable data pipelines to support efficient data processing and analysis. Optimize performance and maintain system stability. Participate in architecture…
Added just now
AS
Sr. Electrical Design Engineer II - 3056329
Apex Systems, Inc.
Seattle, WA
- $42 to $52 USD / hour
…procedures and associated test hardware for electric propulsion systems. The role involves authoring test specifications, defining acceptance criteria based on component-level requirements,…
Added just now
AS
Instructional Designer V - 3056463
Apex Systems, Inc.
Seattle, WA
- $66 to $76 USD / hour
In this role, you will design and develop learning experiences that directly support the growth and success of a global data center workforce. You will work backwards from the needs of…
Added just now
Customer Support Specialist - LC Software
Thermo Fisher Scientific
Remote, United States
The Customer Support Specialist - LC (Liquid Chromatography) Software plays a critical role in enabling Thermo Fisher Scientific chromatography systems to operate seamlessly on the Empower™…
Added just now
Technical Sales Specialist – Inorganic Spectroscopy [ICP-OES & ICP-MS]
Thermo Fisher Scientific
Remote, United States
…technical knowledge for the product line and brings in technical support as needed to advance the solution…
Added just now
AS
EV Charging System Verification Engineer - 3054294
Apex Systems, Inc.
Seattle, WA
- $60 to $70 USD / hour
JOB TITLE: EV Charging Systems Verification Engineer
Added just now
Data Center COE Project Manager
ABB Inc
Tacoma, WA
Managing external suppliers to ensure availability of equipment, systems, material and services
Added just now
Senior Software Engineer - Java Full Stack & AI
Mastercard
O'Fallon, MO
…build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and…
Added just now
Senior Software Engineer - Java Full Stack & AI
Mastercard
O'Fallon, MO
…build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and…
Added just now
Network Engineer, Foundation & Support
Meta
Jefferson City, MO
Network Engineer, Foundation & Support Responsibilities:
Added just now
Sales Consultant
Boater's World Marine Centers
Lake Placid, FL
…customer-focused environment, we'll provide the training, tools, and support needed to help you…
Added just now
Operations Associate
ReLogic Research
Huntsville, AL
…the business running behind the scenes. This role provides support across purchasing, quality management, and proposal activities - giving the right candidate broad exposure to how a…
Added just now
Associate Director of Residential Education
Loyola University New Orleans
New Orleans, LA
Develop and maintain partnerships with academic colleges, deans, faculty, and Student Affairs offices to support living-learning communities and residential educational initiatives.
Added just now
Maintenance Technician
BHI Senior Living
CARMEL, IN
…of care, ensuring our residents have access to comprehensive support and services as their needs evolve. We offer a vibrant and enriching lifestyle but also the assurance of compassionate…
Added 1 min ago
Manufacturing/Process Engineer
Lightera
Carrollton, GA
…Manufacturing/Process Engineer is also responsible for providing ongoing support for optical connectivity products and processes in current production. This engineer will measure and…
Added 1 min ago
Physical Therapist – Powerback Rehabilitation To You
Genesis Administrative Services LLC
Maynard, MA
Support for New Grads: Our Powerback Clinical Mentorship Program kicks off on day one, helping you learn from the best in the field.
Added 1 min ago
GA
Physical Therapist (PT) - Mobile Outpatient
Genesis Administrative Services LLC
Lowell, MA
- $47.33 to $63 USD / hour
Support for New Grads: Our Powerback Clinical Mentorship Program kicks off on day one, helping you learn from the best in the field.
Added 1 min ago
Physical Therapist (PT) - Mobile Outpatient
Genesis Administrative Services LLC
Manchester, NH
Support for New Grads: Our Powerback Clinical Mentorship Program kicks off on day one, helping you learn from the best in the field.
Added 1 min ago
Physical Therapist (PT) - Mobile Outpatient
Genesis Administrative Services LLC
Salem, NH
Support for New Grads: Our Powerback Clinical Mentorship Program kicks off on day one, helping you learn from the best in the field.

GitHub, Inc.

Staff Manager, Product Security Response

United States

$144,600 to $383,500 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $144,600 to $383,500 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About GitHub

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

GitHub is transforming how the world builds secure software, and we are looking for a Staff Manager, Product Security Response to lead the team responsible for the last line of defense once vulnerabilities reach GitHub's shipped products: our Product Security Incident Response Team (PSIRT) .

This is a people-management role at the center of GitHub's vulnerability response posture. You will lead an 8-person team covering first-party vulnerability triage and remediation coordination, CVE/CNA operations, and external researcher engagement through HackerOne. You will set the strategy, staffing model, and operational rigor that keeps incident response sustainable as both incident volume and bug bounty submission volume continue to grow sharply year over year, while partnering closely with Legal/CELA, Security Comms, and Microsoft's MSRC to keep scope boundaries clean and response execution credible to regulators and partners.

Responsibilities

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Qualifications

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Compensation Range

The base salary range for this job is USD $144,600.00 - USD $383,500.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive

Manager fundamentals

Model
Coach
Care

Leadership principles

Create clarity
Generate energy
Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are - because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Apply About employer

Report this job