Staff Engineering Manager, Cloud Security

GitHub
San Francisco, CA, United States
1 day ago
Apply on www.sanfranciscogigs.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
2 years minimum
Working hours
Regular working hours

Tech stack

Kubernetes Security Microsoft Access Amazon Web Services Microsoft Azure Software as a Service Cloud Computing Cloud Computing Security Code Review Cyber Security Github Identity and Access Management Intrusion Detection and Prevention
+7 more
Key Management Software Vulnerability Management Google Cloud Enterprise Software Applications Software Security Static Application Security Testing Dynamic Application Security Testing

Job description

GitHub is seeking a Staff Engineering Manager to lead the Cloud Security engineering team. This team is responsible for helping protect the cloud infrastructure that power GitHub at global scale.

In this role, you will lead a team of security-focused engineers working across multi cloud security posture, infrastructure security, secure-by-default platform capabilities, and risk reduction across GitHub’s production environments. You will partner closely with engineering, security, infrastructure, compliance, and product teams to identify high-impact risks, build durable technical solutions, and improve the security of GitHub’s cloud ecosystem.

You will create the conditions for a high-performing team to do its best work: setting clear priorities, building strong partnerships, coaching engineers, improving execution, and ensuring the team delivers security outcomes that are technically sound, scalable, measurable, and aligned with GitHub’s business needs.

Responsibilities

  • Lead and grow a distributed Cloud Security engineering team, creating clarity around priorities, ownership, execution, and impact.
  • Partner with Security, Infrastructure, Platform, Product, and Engineering leaders to define and deliver a technical roadmap that reduces cloud security risk across GitHub.
  • Drive cloud security initiatives across areas such as secure infrastructure configuration, identity and access, vulnerability and exposure management, incident response readiness, and secure-by-default platform capabilities.
  • Guide the team in designing scalable, reliable, and observable security systems that integrate effectively with GitHub’s engineering workflows.
  • Build strong operating mechanisms for prioritization, execution, stakeholder communication, dependency management, and measurable security outcomes.
  • Coach and develop engineers, support career growth, manage performance, and foster a culture of ownership, learning, inclusion, and continuous improvement.
  • Champion engineering excellence through automation, tooling, standardization, and operational practices that make secure outcomes easier for GitHub engineering teams.
  • Partner with incident response, governance, risk, and compliance teams to ensure cloud security investments improve both real-world security posture and auditability.
  • Help the team balance proactive risk reduction with responsive security work, ensuring urgent issues are handled effectively without losing sight of long-term strategic goals.

Requirements

  • 10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area,
  • OR Associate’s Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area,
  • OR Bachelor’s Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area,
  • OR Master’s Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area,
  • OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area,
  • OR equivalent experience.
  • 2+ years people management experience., * 5+ years experience with securing one or more cloud platforms, such as Azure, AWS, or Google Cloud.
  • 3+ years experience with cloud security posture management, IaC security, container/Kubernetes security, IAM, secrets management, vulnerability management, detection engineering, or incident response.
  • 2+ years experience operating in large-scale SaaS, developer platform, enterprise software, or high-compliance environments.
  • 2+ years experience working with application security tools (SAST, DAST, SCA) and/or performing security review activities (threat modeling, security design and architecture review, application security testing and code review) within the development lifecycle.

Benefits & conditions

The base salary range for this job is USD $140,400.00 - USD $372,300.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual’s base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee’s role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

  • Customer-obsessed
  • Ship to learn
  • Growth mindset
  • Own the outcome
  • Better together
  • Diverse and inclusive

Manager fundamentals

  • Model
  • Coach
  • Care

Leadership principles

  • Create clarity
  • Generate energy
  • Deliver success

About the company

GitHub is the world’s leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot., GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are-because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don’t discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there’s any way we can make the interview process better for you; we’re happy to accommodate!

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.sanfranciscogigs.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

6:36 min

Funding open source through GitHub Accelerator and Sponsors

Stormy Peters · World Congress 2023

3:39 min

Addressing code review surrender and process exploitation

Laura Tacho Laura Tacho · World Congress 2026 Europe

6:10 min

Unlocking free learning credits via Google Cloud Innovators

Asrar Asrar · World Congress 2024

10:35 min

Teaching and coaching security concepts for lasting impact

Tanya Janca · World Congress 2021

2:40 min

Using GitHub primitives for internal documentation and corporate operations

Kyle Daigle · Coffee With Developers

Videos

See all

Related articles

See all