Staff Security Data Engineer

GitHub, Inc.•UNAVAILABLE, UNAVAILABLE

4d•Remote

About The Position

GitHub is seeking an experienced data engineer to help define and maintain the infrastructure, data, and policies used by its Security Operations team to detect, respond to, and investigate sophisticated threats targeting GitHub and its users. The role designs, builds, and maintains scalable, reliable data infrastructure across Azure and AWS, using technologies such as Terraform, Kusto, and Airflow. It owns foundational capabilities—including pipelines, compute clusters, tables, and data models—that support security monitoring, detection, threat hunting, incident response, and investigations. The position also helps establish and maintain security telemetry policies so critical security data remains available, trustworthy, appropriately governed, and useful throughout its lifecycle. It provides technical leadership across organizational boundaries and works collaboratively with Security teams and service owners.

Requirements

10+ years of experience in security analysis, security research, cybersecurity, security engineering, or a relevant area; alternatively, an Associate's degree and 9+ years, Bachelor's degree and 8+ years, Master's degree and 6+ years, Doctorate and 4+ years, or equivalent experience.
5+ years of hands-on experience building and maintaining cloud-scale Azure infrastructure.
3+ years of deep production experience with Kusto and KQL, Apache Airflow, Terraform, and Python.
2+ years of experience leading complex initiatives across organizational boundaries, aligning stakeholders, and translating operational requirements into durable technical solutions.

Nice To Haves

Experience collaborating with Security Operations and Engineering teams on security telemetry requirements.
Experience supporting Security Operations disciplines such as Threat Detection, Incident Response, Threat Intel, and/or Red Teaming.
Experience leveraging AI workflows, where appropriate, to improve security outcomes.
Experience designing near-real-time telemetry ingestion using Azure Event Hubs or comparable technologies.
Experience establishing observability, reliability, data-quality, and cost-management practices for data platforms.

Responsibilities

Design, build, and maintain secure, reliable, and scalable data infrastructure in Azure and AWS, including Terraform-managed resources, Kusto clusters and tables, and Airflow-orchestrated ETL pipelines.
Lead cross-organizational initiatives to onboard new security telemetry and identify and close visibility gaps.
Establish and advance data governance practices for security telemetry, including highly sensitive data sources.
Define and drive adoption of security telemetry policies and standards, partnering with Security teams and service owners to identify and remediate gaps.
Provide technical leadership to projects focused on data platforms and infrastructure supporting security monitoring, threat detection, threat hunting, investigations, and incident response.