Senior Product Security Engineer

GitHub, Inc. • UNAVAILABLE, UNAVAILABLE

10h • Remote

About The Position

GitHub is seeking a Product Security Engineer to join its Security Services organization and help ensure the security of its software products. The role performs security analyses, identifies vulnerabilities, and works with product and engineering teams to embed security best practices throughout the development lifecycle. The engineer engages with internal and external stakeholders, offers expert security guidance, and helps drive organization-wide security initiatives.

The position is remote within the United States. GitHub describes itself as remote-first and offers competitive pay, learning and growth opportunities, and benefits. The base salary range is USD $124,000 to $329,200 per year; pay depends on factors including location, experience, knowledge, skills, and abilities. Certain roles may also be eligible for an annual bonus, stock, or sales incentives, subject to applicable plans and role terms.

Requirements

• At least 7 years of experience in security analysis, security research, cybersecurity, security engineering, software engineering, or a relevant area; alternatively, an associate degree and at least 6 years, a bachelor's degree and at least 5 years, a master's degree and at least 3 years, a doctorate and at least 1 year, or equivalent experience.
• At least 1 year of experience in coding or software development.

Nice To Haves

• Experience with cloud security and modern software development practices.
• Relevant security certifications such as OSWE, Burp Suite Certified Practitioner (BSCP), or equivalent.
• Strong expertise in security principles, including the Security Development Lifecycle (SDL), and experience in vulnerability management.
• Ability to influence others and communicate and translate complex technical security concepts into actionable insights for technical and nontechnical audiences.

Responsibilities

• Analyze complex issues using multiple data sources to identify security problems and drive resolution of systemic security issues.
• Lead large-scale security reviews and conduct architectural and design security reviews for feature areas.
• Work with product and engineering teams to integrate security into design, development, and deployment, including through risk assessments, design reviews, and threat modeling.
• Use subject matter expertise to identify security issues, tools, mitigations, and processes; stay current with the security landscape and coach others.
• Identify, prioritize, and manage moderately complex security issues that negatively affect customers, and create and drive adoption of mitigations.
• Prepare leaders to respond to security threats with significant reputational risks and communicate technical information about security risks to nontechnical audiences.
• Develop and maintain secure engineering documentation, guidance, and other materials supporting security best practices.

Benefits

• Competitive pay.
• Learning and growth opportunities.
• Benefits to support employees.
• Certain roles may be eligible for an annual bonus and stock.
• Certain roles may have the opportunity to earn sales incentives, depending on plan terms and the employee's role.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed