Engineering Manager - Product Security Engineering, Code Analysis

GitHub is changing the way the world builds secure software and we want you to help change the way we secure GitHub. We're looking for an experienced technical engineering manager to help lead a vibrant and geographically distributed group of engineers on our Product Security Engineering Code Analysis team.

This team works on tooling and processes to automatically detect and track vulnerabilities internally at GitHub. Here are a few things that team does:

• Finding vulnerabilities - We coordinate our usage of GitHub Advanced Security features (CodeQL, Dependabot, Secret Scanning) inside GitHub. The team is a resource within Product Security Engineering to perform variant analysis of discovered vulnerabilities and develop custom CodeQL rules to prevent future occurrences. 
• Tracking vulnerabilities - We build the underlying systems that allow us to track vulnerabilities – from our Bug Bounty, internal code reviews and Red Team operations – from discovery to remediation. We develop the tooling to interface with GitHub.com and track this data at a company level and then work with engineering leadership and across the organization to drive remediation.
• Supporting engineering teams - We provide actionable advice to engineering teams when they are investigating automated security analysis alerts, then advise teams on potential fixes or architectural changes.

The primary goal of this job is to enable every team member to do the best work of their lives. As a technical manager, you will lead a group of highly technical security engineers, advocate for them, guide technical discussions and work to hire a diverse group of incredibly talented individuals.

If you have a strong foundation in software engineering, information security or product security, enjoy supporting people of all experience levels, and fancy building and managing a world-class security team, then this might be the gig for you.

Here are some signs of a successful Engineering Manager for the Code Analysis team at GitHub:

• The team regularly ships new tooling or security features to the whole engineering org while minimizing the disruption to our day-to-day workflows.
• The team has the support from engineering leadership to drive remediation across the company.
• The team collaborates with engineering teams to fix vulnerabilities found by our tooling in a blameless way.
• The team is providing actionable feedback and helping drive improvements to GitHub’s Advanced Security products.
• Team members are empowered and demonstrate a strong sense of ownership.
• Individuals on the team are learning, growing, and advancing in their careers.

You may be a good fit if:

• You love coaching, mentoring, sponsorship, and helping others improve.
• You are tenacious, highly organized, and laser focused when working toward a goal.
• Your decisions are inclusive and timely.
• You have worked in a collaborative environment where building relationships across teams was critical to a team’s success.
• You have experience working within an Application Security or Product Security Engineering team.
• You have experience developing software and leading engineering teams.

Minimum salary of $104,400 to maximum $313,300 + bonus + equity + benefits.
· Note: Disclosure as required by sb19-085 (8-5-20) of the minimum salary compensation for this role when being hired in Colorado.