Senior Security Engineer - Vulnerability Management

GitHub is seeking a highly talented and motivated senior security engineer to drive initiatives that affect the security of millions of developers around the world. The role involves designing, building, and supporting the vulnerability management services and tools that allow GitHub to deliver the best developer experience to its internal employees and the rest of the world. The ideal candidate will share a passion for engineering solutions to complex security problems.

Responsibilities:

• Development and implement appropriate and effective vulnerability management solutions to help mitigate threats and risks
• Implement automated and proactive security measures
• Support consistent vulnerability management / patch management process
• Roll out security baselines/standards and validation against frameworks like CIS and STIG
• Provide expert consultation on vulnerability risk and remediation to engineering teams
• Provide regular patch management metrics and reports
• Work with multiple teams and organizations, translating security and vulnerability requirements into terms both leaders and technical implementers can use

You may be a good fit if you have demonstrable experience in the following areas:

• Operational experience with Nessus, Qualys or similar scanning tools
• Experience with container solutions such as Twistlock, Anchore Engine, Trivy, Clair or Dockle
• Understanding of container security such as container escape, malicious image, master/node security baseline
• Familiarity with common security vulnerabilities and the ability to judge their severity and impact to the business
• Familiarity with configuration management software such as Puppet, Chef, Ansible, or Salt
• Experience using Linux day-to-day in a production environment
• Experience working in a decentralized and geographically distributed environment
• Excellent written and verbal communication skills
• A proven track record of taking technical requirements, developing proof of concepts, and developing mature systems.
• A passion and proven ability to drive security that is frictionless, collaborative and effective
• Experience using software version control systems/Git and GitHub
• Ability to engineer solutions using Python, Ruby or Go

Who We Are:

GitHub is the developer company. We make it easier for developers to be developers: to work together, to solve challenging problems, and to create the world’s most important technologies. We foster a collaborative community that can come together—as individuals and in teams—to create the future of software and make a difference in the world.

Leadership Principles:

Customer Obsessed - Trust by Default - Ship to Learn - Own the Outcome - Growth Mindset - Global Product, Global Team - Anything is Possible - Practice Kindness

Why You Should Join:

At GitHub, we constantly strive to create an environment that allows our employees (Hubbers) to do the best work of their lives. We've designed one of the coolest workspaces in San Francisco (HQ), where many Hubbers work, snack, and create daily. The rest of our Hubbers work remotely around the globe. Check out an updated list of where we can hire here: https://github.com/about/careers/remote

We are also committed to keeping Hubbers healthy, motivated, focused and creative. We've designed our top-notch benefits program with these goals in mind. In a nutshell, we've built a place where we truly love working, we think you will too.

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Please note that benefits vary by country. If you have any questions, please don't hesitate to ask your Talent Partner.

#LI-POST

Who We Are:

GitHub is the developer company. We make it easier for developers to be developers: to work together, to solve challenging problems, and to create the world’s most important technologies. We foster a collaborative community that can come together—as individuals and in teams—to create the future of software and make a difference in the world.

Leadership Principles:

Customer Obsessed - Trust by Default - Ship to Learn - Own the Outcome - Growth Mindset - Global Product, Global Team - Anything is Possible - Practice Kindness

Why You Should Join:

At GitHub, we constantly strive to create an environment that allows our employees (Hubbers) to do the best work of their lives. We've designed one of the coolest workspaces in San Francisco (HQ), where many Hubbers work, snack, and create daily. The rest of our Hubbers work remotely around the globe. Check out an updated list of where we can hire here: https://github.com/about/careers/remote

We are also committed to keeping Hubbers healthy, motivated, focused and creative. We've designed our top-notch benefits program with these goals in mind. In a nutshell, we've built a place where we truly love working, we think you will too.

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!

Please note that benefits vary by country. If you have any questions, please don't hesitate to ask your Talent Partner.

#LI-POST