Remote Senior Cloud Security Engineer

GitHub; United States; Remote; USD 128,000 - 339,000; Full time

Benefits offered by this job

Annual bonus

Stock options

Job summary

GitHub is seeking a Senior Cloud Security Engineer to advance our cloud security posture across GitHub and its ecosystem. You will work on hands-on security engineering, design secure defaults, and collaborate to reduce risk while improving developer experience.

You will partner with teams to implement security controls, drive automation, and communicate complex risks to both technical and non-technical audiences.

Qualifications

• 5+ years of cloud infrastructure experience.
• 3+ years building and managing Microsoft Azure infrastructure.
• 1+ year of software development experience.
• 7+ years in security analysis, security research, cyber security, security engineering, or related area.
• Alternative degrees and experience combinations are acceptable per posting.

Responsibilities

• Owns complex security initiatives and develops scalable cloud security solutions.
• Identifies high-priority opportunities; makes data-driven recommendations to improve security posture.
• Maintains cloud security policy, standards, and best practices across teams.
• Creates and implements security controls to protect networks, systems, and data.
• Develops metrics and reports to communicate security risk to leadership.
• Mentors team members and shares knowledge to raise overall security capability.

Skills

Cloud security

Security analysis

Mentoring

Communication

Education

Bachelor's Degree in a related field

Master's Degree

Doctorate

Tools

Azure

Golang

Python

Terraform

Ruby

Job description

GitHub is seeking a Senior Cloud Security Engineer to advance our cloud security posture across GitHub and its ecosystem. You will work on hands-on security engineering, design secure defaults, and collaborate to reduce risk while improving developer experience.

You will partner with teams to implement security controls, drive automation, and communicate complex risks to both technical and non-technical audiences.