Back to all jobs

Engineering Manager - Product Security Engineering, Code Analysis

GitHub

Jun 16

GitHub is changing the way the world builds secure software and we want you to help change the way we secure GitHub. We're looking for an experienced technical engineering manager to help lead a vibrant and geographically distributed group of engineers on our Product Security Engineering Code Analysis team.

This team works on tooling and processes to automatically detect and track vulnerabilities internally at GitHub. Here are a few things that team does:

  • Finding vulnerabilities - We coordinate our usage of GitHub Advanced Security features (CodeQL, Dependabot, Secret Scanning) inside GitHub. The team is a resource within Product Security Engineering to perform variant analysis of discovered vulnerabilities and develop custom CodeQL rules to prevent future occurrences. 
  • Tracking vulnerabilities - We build the underlying systems that allow us to track vulnerabilities – from our Bug Bounty, internal code reviews and Red Team operations – from discovery to remediation. We develop the tooling to interface with GitHub.com and track this data at a company level and then work with engineering leadership and across the organization to drive remediation.
  • Supporting engineering teams - We provide actionable advice to engineering teams when they are investigating automated security analysis alerts, then advise teams on potential fixes or architectural changes.

The primary goal of this job is to enable every team member to do the best work of their lives. As a technical manager, you will lead a group of highly technical security engineers, advocate for them, guide technical discussions and work to hire a diverse group of incredibly talented individuals.

If you have a strong foundation in software engineering, information security or product security, enjoy supporting people of all experience levels, and fancy building and managing a world-class security team, then this might be the gig for you.

Here are some signs of a successful Engineering Manager for the Code Analysis team at GitHub:

  • The team regularly ships new tooling or security features to the whole engineering org while minimizing the disruption to our day-to-day workflows.
  • The team has the support from engineering leadership to drive remediation across the company.
  • The team collaborates with engineering teams to fix vulnerabilities found by our tooling in a blameless way.
  • The team is providing actionable feedback and helping drive improvements to GitHub’s Advanced Security products.
  • Team members are empowered and demonstrate a strong sense of ownership.
  • Individuals on the team are learning, growing, and advancing in their careers.

You may be a good fit if:

  • You love coaching, mentoring, sponsorship, and helping others improve.
  • You are tenacious, highly organized, and laser focused when working toward a goal.
  • Your decisions are inclusive and timely.
  • You have worked in a collaborative environment where building relationships across teams was critical to a team’s success.
  • You have experience working within an Application Security or Product Security Engineering team.
  • You have experience developing software and leading engineering teams.

Minimum salary of $104,400 to maximum $313,300 + bonus + equity + benefits.
· Note: Disclosure as required by sb19-085 (8-5-20) of the minimum salary compensation for this role when being hired in Colorado. 

Who We Are:

GitHub is the developer company. We make it easier for developers to be developers: to work together, to solve challenging problems, and to create the world’s most important technologies. We foster a collaborative community that can come together—as individuals and in teams—to create the future of software and make a difference in the world.

Leadership Principles:

Customer Obsessed - Trust by Default - Ship to Learn - Own the Outcome - Growth Mindset - Global Product, Global Team - Anything is Possible - Practice Kindness

Why You Should Join:

At GitHub, we constantly strive to create an environment that allows our employees (Hubbers) to do the best work of their lives. We've designed one of the coolest workspaces in San Francisco (HQ), where many Hubbers work, snack, and create daily. The rest of our Hubbers work remotely around the globe. Check out an updated list of where we can hire here: https://github.com/about/careers/remote

We are also committed to keeping Hubbers healthy, motivated, focused and creative. We've designed our top-notch benefits program with these goals in mind. In a nutshell, we've built a place where we truly love working, we think you will too.

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Please note that benefits vary by country. If you have any questions, please don't hesitate to ask your Talent Partner.

#LI-POST