> Markdown version of [/jobs/ext/2248834-staff-engineering-manager-cloud-security](https://www.wearedevelopers.com/jobs/ext/2248834-staff-engineering-manager-cloud-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Staff Engineering Manager, Cloud Security - **Company:** GitHub - **Location:** San Francisco, CA, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Access, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Code Review, Cyber Security, Github, Identity and Access Management, Intrusion Detection and Prevention, Key Management, Software Vulnerability Management, Google Cloud, Enterprise Software Applications, Software Security, Static Application Security Testing, Dynamic Application Security Testing - **Published:** August 26, 2026 - **Apply:** https://www.sanfranciscogigs.com/job.asp?id=3365545976&tx=ZT2726THI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * 10+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, * OR Associate's Degree AND 9+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, * OR Bachelor's Degree AND 8+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, * OR Master's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, * OR Doctorate AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area, * OR equivalent experience. * 2+ years people management experience., * 5+ years experience with securing one or more cloud platforms, such as Azure, AWS, or Google Cloud. * 3+ years experience with cloud security posture management, IaC security, container/Kubernetes security, IAM, secrets management, vulnerability management, detection engineering, or incident response. * 2+ years experience operating in large-scale SaaS, developer platform, enterprise software, or high-compliance environments. * 2+ years experience working with application security tools (SAST, DAST, SCA) and/or performing security review activities (threat modeling, security design and architecture review, application security testing and code review) within the development lifecycle. ## Description GitHub is seeking a Staff Engineering Manager to lead the Cloud Security engineering team. This team is responsible for helping protect the cloud infrastructure that power GitHub at global scale. In this role, you will lead a team of security-focused engineers working across multi cloud security posture, infrastructure security, secure-by-default platform capabilities, and risk reduction across GitHub's production environments. You will partner closely with engineering, security, infrastructure, compliance, and product teams to identify high-impact risks, build durable technical solutions, and improve the security of GitHub's cloud ecosystem. You will create the conditions for a high-performing team to do its best work: setting clear priorities, building strong partnerships, coaching engineers, improving execution, and ensuring the team delivers security outcomes that are technically sound, scalable, measurable, and aligned with GitHub's business needs. Responsibilities * Lead and grow a distributed Cloud Security engineering team, creating clarity around priorities, ownership, execution, and impact. * Partner with Security, Infrastructure, Platform, Product, and Engineering leaders to define and deliver a technical roadmap that reduces cloud security risk across GitHub. * Drive cloud security initiatives across areas such as secure infrastructure configuration, identity and access, vulnerability and exposure management, incident response readiness, and secure-by-default platform capabilities. * Guide the team in designing scalable, reliable, and observable security systems that integrate effectively with GitHub's engineering workflows. * Build strong operating mechanisms for prioritization, execution, stakeholder communication, dependency management, and measurable security outcomes. * Coach and develop engineers, support career growth, manage performance, and foster a culture of ownership, learning, inclusion, and continuous improvement. * Champion engineering excellence through automation, tooling, standardization, and operational practices that make secure outcomes easier for GitHub engineering teams. * Partner with incident response, governance, risk, and compliance teams to ensure cloud security investments improve both real-world security posture and auditability. * Help the team balance proactive risk reduction with responsive security work, ensuring urgent issues are handled effectively without losing sight of long-term strategic goals. ## About GitHub GitHub is **_where people build software_**. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects. **Tech Stack:** Ruby, Ruby on Rails **Industries:** Enterprise Software, Platform [Company profile](https://www.wearedevelopers.com/companies/3968-github) ### More Jobs at GitHub - [Software Engineer I](https://www.wearedevelopers.com/jobs/ext/2224713-software-engineer-i) - [Senior Software Engineer, CoPilot Agent Platform](https://www.wearedevelopers.com/jobs/ext/2211591-senior-software-engineer-copilot-agent-platform) - [Staff Software Engineer, Compute Platform](https://www.wearedevelopers.com/jobs/ext/2201843-staff-software-engineer-compute-platform) - [Data Scientist in Data Science](https://www.wearedevelopers.com/jobs/ext/2167390-data-scientist-in-data-science) - [Senior Site Reliability Engineer - IT](https://www.wearedevelopers.com/jobs/ext/2155596-senior-site-reliability-engineer-it) ## Related Videos - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)