> Markdown version of [/jobs/ext/4158569-product-security-incident-response-analyst](https://www.wearedevelopers.com/jobs/ext/4158569-product-security-incident-response-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Product Security Incident Response Analyst - **Company:** GitHub - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $329,200.0 - **Contract:** Permanent contract - **Skills:** Data Analysis, Software System Penetration Testing, Code Review, Cyber Security, Digital Forensics, Github, Open Source Technology, Microsoft Copilot, Data Driven Tests, Software Engineering, GitHub Copilot, Software Security, Free and Open-Source Software, Static Application Security Testing, Dynamic Application Security Testing - **Published:** October 23, 2026 - **Apply:** https://www.careerbuilder.com/job-details/product-security-incident-response-analyst--149ca233-7bf2-470a-bdf3-186b71ba947a ## About the Role Incident Response, Computer Security, Security Analysis, Software Development, GitHub, Automation, Incident Response, Computer Security, Security Analysis, Data Analysis, 7+ years experience in product security, security analysis, security research, cyber security, security engineering, or relevant area o OR Associate's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Bachelor's Degree AND 5+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Master's Degree AND 3+ years experience in security analysis, security research, cyber security, security engineering, or relevant area o OR Doctorate AND 1+ year(s) experience in security analysis, security research, cyber security, security engineering, or relevant area o OR equivalent experience. 1+ year(s) experience investigating software product vulnerabilities within the development lifecycle using application security tools (SAST, DAST, SCA) and/or performing threat modeling, security design and architecture review, application security testing, and code review, with hands-on involvement in assessing product impact and collaborating with engineering teams to remediate findings. 1+ years' experience working with GitHub and/or other open-source software platforms. Preferred Qualifications: 9+ years' experience in product security, security operations, security research, cybersecurity, security engineering, or a relevant area, including substantial hands-on experience investigating software product vulnerabilities, responding to product security incidents, and coordinating remediation with engineering teams. Experience coordinating remediation with engineering teams, and drafting and publishing CVEs. Relevant penetration testing, incident handling, or digital forensics certifications (such as OSCP, GPEN, GCIH, GCFA, or GCFE) are a plus, but do not substitute for product security experience. Proficiency in using Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA) to investigate software product vulnerabilities, validate findings, assess exploitability and product impact, and verify remediation with engineering teams-not solely operating scanners or reporting their output., Experience working with GitHub and/or other open-source software platforms, which is beneficial for understanding the collaborative and open-source nature of the role ## Description About GitHub: GitHub is the world's leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot. Locations: In this role you can work from Remote, United States Overview: As a Senior Product Security Incident Response Analyst, you will design and implement solutions to address product security incidents, enhance security policies, and identify opportunities for automation. The ideal candidate will be a key contributor to strengthening our product security incident response capabilities, driving impactful solutions through automation and policy enhancements while gaining hands-on experience with cutting-edge security strategies and collaborating with industry experts in a dynamic environment. Responsibilities: Develop and Operationalize Solutions: Develop and implement solutions to address product security incidents across all GitHub Products, ensuring scalability and effectiveness. Utilize advanced data analysis and forensics techniques to investigate, scope and resolve product security incidents. Continuously improve incident response processes and solutions over time. Automation: Identify and implement automation opportunities to enhance efficiency and effectiveness in incident response operations. Develop and maintain automation scripts and tools to streamline response processes and case management. Collaborate with others to prioritize and invest in the most valuable automation opportunities. Collaboration: Engage with internal teams and external partners to promote security risk awareness and best practices. Translate complex technical information into understandable terms for nontechnical audiences, effectively communicating security risks. Develop and share reports with leaders on security risks and remediation strategies to resolve and mitigate security concerns. Collaborate with architecture teams to integrate security into the design and development of systems and applications, ensuring robust security frameworks are in place from the ground up. Data-Driven Analysis and Forensics: Analyze key metrics and key performance indicators (KPIs) to identify trends in product security incidents and escalate appropriately. Utilize multiple data sources to conduct and interpret analysis, identifying anomalies and patterns in security data. Leverage forensics techniques to investigate, scope and resolve product security incidents, ensuring thorough and accurate analysis. Recommend improvements and metrics to address gaps in telemetry, measurement and enhance incident response capabilities. Incident Response Activities: Participate in product security incident response activities, leveraging technical acumen to address and resolve security concerns effectively. Recognize patterns and trends to propose innovative solutions for security improvements, contributing to a culture of continuous enhancement and excellence. Ensure compliance with relevant security regulations and standards, conducting risk assessments and audits to identify and address potential compliance gaps. Coordinate communications and manage stakeholder engagement during product security incidents, ensuring timely, clear updates, and draft and publish CVEs in coordination with relevant teams and partners. ## About GitHub GitHub is **_where people build software_**. More than 150 million people use GitHub to discover, fork, and contribute to over 420 million projects. **Tech Stack:** Ruby, Ruby on Rails **Industries:** Enterprise Software, Platform [Company profile](https://www.wearedevelopers.com/companies/3968-github) ### More Jobs at GitHub - [Staff Software Engineer, GitHub Actions](https://www.wearedevelopers.com/jobs/ext/4326148-staff-software-engineer-github-actions) - [Software Engineer III, Cloud Foundations](https://www.wearedevelopers.com/jobs/ext/4030147-software-engineer-iii-cloud-foundations) - [Principal Systems Engineer, Database Infrastructure](https://www.wearedevelopers.com/jobs/ext/4031478-principal-systems-engineer-database-infrastructure) - [Senior Solutions Engineer](https://www.wearedevelopers.com/jobs/ext/4032462-senior-solutions-engineer) - [Staff Software Engineer, Traffic Team](https://www.wearedevelopers.com/jobs/ext/4034547-staff-software-engineer-traffic-team)