Senior Cloud Security Engineer

GitHub, Inc. • UNAVAILABLE, UNAVAILABLE

18h • Remote

About The Position

GitHub is seeking an experienced Security Engineer to evolve and advance the cloud security posture of GitHub and its ecosystem. As a member of the Cloud Security Engineer team, you will work with teams across GitHub to help set technical direction for cloud security. The role combines hands-on security engineering with cross-functional collaboration to establish secure defaults, reduce security risks, and improve the developer experience. Successful candidates are autonomous and collaborative problem solvers who can work in ambiguous environments, automate and integrate disparate technologies, communicate effectively, and apply a deep understanding of modern cloud and containerized security threats.

Requirements

• At least 5 years of experience working with cloud infrastructure.
• At least 3 years of experience building and managing infrastructure in Microsoft Azure.
• At least 1 year of experience in software development.
• At least 7 years of experience in security analysis, security research, cybersecurity, security engineering, or a relevant area; alternatively, an associate degree and 6+ years, a bachelor's degree and 5+ years, a master's degree and 3+ years, a doctorate and 1+ year, or equivalent experience.
• Strong problem-solving and communication skills.
• Deep technical understanding of modern cloud and containerized security threats.
• Ability to work autonomously in ambiguous environments and collaborate effectively.
• Experience automating and integrating disparate technologies.
• Ability to influence customers, managers, and others through technical solutions.

Nice To Haves

• Extensive experience building security solutions, ideally for cloud services.
• Experience building services in Golang (preferred), Python, Terraform, and/or Ruby.
• Experience with networking in cloud environments and common services used to manage and implement network segmentation.
• Experience performing threat modeling and design reviews to assess security implications and requirements for introducing new technologies.
• Ability to produce concise, high-quality technical documentation.
• AZ-900, AZ-500, SC-100, SC-500, Hashicorp Terraform Associate, GIAC Cloud Security Essentials (GCLD), GIAC Public Cloud Security (GPCS), GIAC Cloud Security Architecture and Design (GCAD), or other relevant cloud security certifications.

Responsibilities

• Own complex technical security initiatives and develop solutions for cloud security issues, considering intended and unintended consequences; operationalize and scale programs and solutions.
• Identify high-priority opportunities and make data-driven recommendations to improve efficiency, strengthen security posture, and proactively prevent attacks.
• Help teams understand the implications of security controls, including their impacts on availability.
• Contribute to and maintain accurate, comprehensive cloud security policies, standards, and best practices across the organization; design mitigations for policy gaps and recommend refinements based on evolving threats and industry trends.
• Create and implement security controls and solutions that protect the confidentiality, integrity, and availability of networks, systems, and data.
• Recommend mitigation strategies based on analysis of metrics, KPIs, and other data; define and implement metrics to address measurement gaps and influence prioritized action based on severity.
• Identify and support automation opportunities that improve the efficiency and effectiveness of security guardrails; propose investments with the greatest potential risk reduction.
• Develop, implement, maintain, and improve security services and solutions over time.
• Educate and engage internal teams and external partners to promote consistent understanding of cloud security risks, best practices, and standards.
• Communicate complex technical information and security risks to nontechnical audiences, including leaders and industry partners.
• Develop and share reports with leaders on security risks and remediation strategies.
• Collaborate across the organization to address security risks and define new requirements and feature sets.
• Mentor others, share knowledge, and help develop the team's collective knowledge.

Benefits

• Competitive pay.
• Generous learning and growth opportunities.
• Excellent benefits.
• Certain roles may be eligible for an annual bonus and stock.
• Certain roles may have the opportunity to earn sales incentives, depending on the plan and employee's role.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed