Jobs in the United States

25+ jobs

Save this search

Added just now
Oil & Gas Engineering Associate
Farnsworth Group
St. Louis, MO
Provide technical support as part of an engineering team on projects reporting directly to Farnsworth’s project manager.
Added just now
Energy and Utilities Engineering Co-Op (May - December 2027)
Farnsworth Group
Greenwood Village, CO
Provide technical support as part of an engineering team on projects reporting directly to Farnsworth’s project manager.
Added just now
AC
Facilities Planning Manager
Ada County
Boise, ID
- $90,000 to $95,000 USD / year
Coordinates with Senior Project Manager in Preparing project scopes, budgets, and cost estimates;
Added just now
Product Operations Specialist - Digital Health Solutions (MSO)
Apple
Cupertino, CA
Partner with clinicians, design, and engineering to define clinical and operational requirements and use cases for new product features, balancing clinical impact with user experience and…
Added 1 min ago
Senior Manager, Site Reliability Engineering - Infrastructure Platform
OKTA
Bellevue, WA
…high throughput and 99.999 availability. We're looking for a technical leader to help us continue to scale the service with great people and reliable, cost-effective, and efficient…
Added 1 min ago
Business Development Manager
Corning
Corning, NY
Experience as a Sales Engineer, Account Manager, Business Development or Product Line Manager or relevant technical position within Corning Optical Communications
Added 2 mins ago
AF
Technical Program Manager III - AMZ10237159
Amazon Fulfillment Centers
Seattle, WA
- $187,870 to $201,200 USD / year
Offered Position: Technical Program Manager III
Added 2 mins ago
Manager, TPI R&D Chemistry
TerraPower
Everett, WA
Serve as the primary technical and organizational leader for Radiochemistry Process Development, influencing cross-functional teams across Engineering, Operations, Production, Quality,…
Added 2 mins ago
Senior Manager - Avionics Packaging Mechanical Engineering
Blue Origin LLC
Seattle, WA
…team in the the Lunar Permanence business unit. This Senior Manager position leads a team of mechanical engineers and technical specialists responsible for the design, analysis, testing,…
Added 2 mins ago
Associate Customer Success Manager
HHAeXchange
United States
We’re looking for an Associate Customer Success Manager who is eager to learn, grow, and work directly with home healthcare agencies to help improve the experience of caregivers and…
Added 3 mins ago
IS
Sr. Principal Program Manager
INSPYR Solutions
Fort Worth, TX
- $68 to $73 USD / hour
We are looking for a Sr. Principal Program Manager with strong technical leadership experience and a proven background supporting enterprise Finance, SAP, and Procurement environments. This…
Added 3 mins ago
Clinical Specialist II, CPT - Jacksonville, FL
Abbott Laboratories
Jacksonville, FL
Provides technical, clinical, and programming assistance, primarily in support of 1-2 Territory Manager(s).
Added 3 mins ago
Technical Program Manager - Quality Systems - Columbus, OH
Abbott Laboratories
Columbus, OH
This position works out of our Columbus, OH in the Nutrition Division. This role within Abbott Nutrition’s Global Engineering, Manufacturing Technology & Innovation (MT&I) team leads the…
Added 3 mins ago
Clinical Specialist
Abbott Laboratories
Denver, CO
Working under general direction, provides engineering, sales, educational and technical support in response to field inquiries from physicians, health care professionals, patients, and…
Added 3 mins ago
Regional Clinical Affairs Manager - Electrophysiology
Abbott Laboratories
Abbott Park, IL
Regional Clinical Affairs Manager, Electrophysiology
Added 3 mins ago
W
Senior Business Development Manager - Workforce Management
Wise
New York, NY
- $175,000 to $245,000 USD / year
● Technical Acumen: Proven success selling API-first solutions, with the technical depth to comfortably guide integration discussions with C-suite executives, product managers, and…
Added 3 mins ago
Client Operations Manager - Warranty Program
McKinstry Company
Seattle, WA
Recruit, onboard, train, and develop team members and backup coordinators to build technical capability, operating consistency, continuity, and capacity for program growth.
Added 3 mins ago
Vehicle CAD Manager - Lunar Permanence
Blue Origin LLC
Seattle, WA
Monitor technical progress, requirements, schedule, deliverables and risks as well as review recommendations for change with program management
Added 3 mins ago
EK
Mechanical Maintenance Supervisor
Emerald Kalama Chemical LLC
Kalama, WA
- $88,400 to $147,400 USD / year
…within the Kalama chemical plant. Reporting to the Maintenance Manager, this role provides leadership and technical expertise to ensure the safe, reliable, and efficient operation of…
Added 3 mins ago
Chassis Project Manager
Stellantis
Auburn Hills, MI
Key responsibilities include: Lead technical development and delivery of chassis systems for assigned vehicle programs; coordinate cross-functional teams to achieve program milestones and…
Added 3 mins ago
TA
Manufacturing Engineering Internships- Industrial or Manufacturing
Trust Automation
San Luis Obispo, CA
- $19 to $20 USD / hour
Trust Automation’s Paid Internship Program is designed to offer opportunities for students and recent graduates to build their resumes, apply academic knowledge, and network with…
Added 4 mins ago
AT
Manager Network Infrastructure
Akamai Technologies, Inc.
Jefferson City, MO
- $108,600 to $195,400 USD / year
As the Manager of Network Infrastructure, you will lead a technical, 24x7 operations team maintaining large-scale network infrastructure. You will resolve complex engineering issues, manage…
Added 4 mins ago
HRIS Analyst
Davis H Elliot Company, Inc.
Lexington, KY
…1946, Elliot has built a reputation as a trusted leader in engineering, energy delivery, technical services, and technology solutions. When you join Elliot, you're more than an employee,…
Added 4 mins ago
Technology Manager - Construction Program Management (Kansas City, MO)
Burns & McDonnell
Kansas City, MO
Description The Program Technology Manager is responsible for leading, managing and delivering the technology and customer requirements for client Program Management. This position will…
Added 5 mins ago
Technical Information Architecture Systems Administrator
TerraPower
Everett, WA
The Technical Information Architecture Systems Administrator reports to the Operations Program Manager and is responsible for building the structure, systems, and organizational…

GitHub, Inc.

Staff Manager, Product Security Response

United States

$144,600 to $383,500 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $144,600 to $383,500 USD / year
Posting language: English
Posted: Nov 5, 2026

Original job description

About GitHub

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

GitHub is transforming how the world builds secure software, and we are looking for a Staff Manager, Product Security Response to lead the team responsible for the last line of defense once vulnerabilities reach GitHub's shipped products: our Product Security Incident Response Team (PSIRT) .

This is a people-management role at the center of GitHub's vulnerability response posture. You will lead an 8-person team covering first-party vulnerability triage and remediation coordination, CVE/CNA operations, and external researcher engagement through HackerOne. You will set the strategy, staffing model, and operational rigor that keeps incident response sustainable as both incident volume and bug bounty submission volume continue to grow sharply year over year, while partnering closely with Legal/CELA, Security Comms, and Microsoft's MSRC to keep scope boundaries clean and response execution credible to regulators and partners.

Responsibilities

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Qualifications

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Compensation Range

The base salary range for this job is USD $144,600.00 - USD $383,500.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive

Manager fundamentals

Model
Coach
Care

Leadership principles

Create clarity
Generate energy
Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are - because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Establish and defend the accountabilities, staffing model, and on-call rotation health for PSIRT , ensuring both teams can sustainably execute incident response and researcher-facing commitments without relying on heroics.
Own the PSIRT charter and scope boundary relative to ProdSec Services, CSIRT/SIRT, Legal/CELA, and Security Comms, and hold the line on that boundary as adjacent functions try to route work back to PSIRT by default.
Drive the CVE/CNA program, including expansion to cover cloud products, and own GitHub's direct relationship with the external security researcher community.
Lead incident response for first-party vulnerability disclosures: triage, technical assessment, remediation coordination with Engineering, and lightweight command for time-sensitive vulnerability management.
Define and drive the team's key metrics and KPIs (triage-to-handoff time, backlog aging, containment speed, bug bounty resolution SLA), using them to identify trends and direct where investment and process changes are needed.
Translate highly technical, often embargoed or TLP-marked vulnerability information into clear guidance for non-technical stakeholders, including executive and regulatory audiences.
Partner with Legal/CELA, Security Comms, and Microsoft's MSRC to resolve ownership ambiguity at the edges of PSIRT's scope (regulatory notification, coordinated disclosure, customer communications), rather than letting it default to PSIRT by inertia.
Manage people: hire, develop, and performance-manage a team of security engineers and researchers; lead through active workforce situations (coverage gaps, performance management, attrition risk) with the same rigor applied to technical incident response.

Required Qualifications:

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience
2+ years people management experience.
2+ years of direct experience in product security incident response or vulnerability management, including coordinating remediation across engineering teams under time pressure.
2+ years experience with CVE/CNA operations and direct engagement with the external security researcher community.

Preferred Qualifications:

2+ years leading a Product Security Incident Response Team (PSIRT), CSIRT, SOC, or comparable vulnerability-management function.
2+ years experience leading multi-disciplinary teams across engineering, legal, and communications functions.
Experience navigating regulatory notification requirements (e.g., FedRAMP) and partnering with Legal/CELA on disclosure obligations.
Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or other relevant certification.
1+ year(s) experience working with GitHub and/or open source software.
Familiarity with GitHub's products, platform, and developer ecosystem.

Apply About employer

Report this job