Staff Manager, Product Security

Job Summary

Leading a dedicated team, the full-time Staff Manager, Product Security will oversee the Product Security Incident Response Team (PSIRT), managing vulnerability triage, remediation coordination, and external researcher engagement, all while working remotely.

Key responsibilities

• Establish and maintain the staffing model and operational rigor for PSIRT to ensure sustainable incident response
• Drive the CVE/CNA program and manage GitHub's relationship with the external security researcher community
• Lead incident response for first-party vulnerabilities, coordinating remediation efforts with engineering teams

Required qualifications

• 10+ years of experience in security analysis, research, or engineering, or equivalent educational background with relevant experience
• 2+ years of people management experience
• 2+ years of direct experience in product security incident response or vulnerability management
• 2+ years of experience with CVE/CNA operations and engaging with the external security researcher community