Staff Engineering Manager, Cloud Security

GitHub, Inc.•UNAVAILABLE, UNAVAILABLE

71d•Remote

About The Position

GitHub is seeking a Staff Engineering Manager to lead the Cloud Security engineering team. This team is responsible for helping protect the cloud infrastructure that power GitHub at global scale. In this role, you will lead a team of security-focused engineers working across multi cloud security posture, infrastructure security, secure-by-default platform capabilities, and risk reduction across GitHub's production environments. You will partner closely with engineering, security, infrastructure, compliance, and product teams to identify high-impact risks, build durable technical solutions, and improve the security of GitHub's cloud ecosystem. You will create the conditions for a high-performing team to do its best work: setting clear priorities, building strong partnerships, coaching engineers, improving execution, and ensuring the team delivers security outcomes that are technically sound, scalable, measurable, and aligned with GitHub's business needs.

Requirements

10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, OR equivalent experience.
2+ years people management experience.

Nice To Haves

5+ years experience with securing one or more cloud platforms, such as Azure, AWS, or Google Cloud.
3+ years experience with cloud security posture management, IaC security, container/Kubernetes security, IAM, secrets management, vulnerability management, detection engineering, or incident response.
2+ years experience operating in large-scale SaaS, developer platform, enterprise software, or high-compliance environments.
2+ years experience working with application security tools (SAST, DAST, SCA) and/or performing security review activities (threat modeling, security design and architecture review, application security testing and code review) within the development lifecycle.

Responsibilities

Lead and grow a distributed Cloud Security engineering team, creating clarity around priorities, ownership, execution, and impact.
Partner with Security, Infrastructure, Platform, Product, and Engineering leaders to define and deliver a technical roadmap that reduces cloud security risk across GitHub.
Drive cloud security initiatives across areas such as secure infrastructure configuration, identity and access, vulnerability and exposure management, incident response readiness, and secure-by-default platform capabilities.
Guide the team in designing scalable, reliable, and observable security systems that integrate effectively with GitHub's engineering workflows.
Build strong operating mechanisms for prioritization, execution, stakeholder communication, dependency management, and measurable security outcomes.
Coach and develop engineers, support career growth, manage performance, and foster a culture of ownership, learning, inclusion, and continuous improvement.
Champion engineering excellence through automation, tooling, standardization, and operational practices that make secure outcomes easier for GitHub engineering teams.
Partner with incident response, governance, risk, and compliance teams to ensure cloud security investments improve both real-world security posture and auditability.
Help the team balance proactive risk reduction with responsive security work, ensuring urgent issues are handled effectively without losing sight of long-term strategic goals.