Remote Senior Product Security Incident Response Analyst

GitHub, Inc.; United States; Remote; USD 124,000 - 329,000; Full time

Job summary

GitHub, Inc. is seeking a Senior Product Security Incident Response Analyst to design and implement solutions for product security incidents, strengthening policies and automation across GitHub products.

The role emphasizes data-driven analysis and close collaboration with engineering and security teams. The ideal candidate will lead incident response initiatives, develop automation to streamline case management, and help publish CVEs in coordination with partners.

Qualifications

• 7+ years experience in product security, security analysis, security research, cyber security, security engineering, or relevant area.
• 1+ year(s) experience investigating software product vulnerabilities within the development lifecycle using application security tools (SAST, DAST, SCA) and/or performing threat modeling, security design and architecture review, application security testing, and code review.
• Experience coordinating remediation with engineering teams and drafting and publishing CVEs is a plus.

Responsibilities

• Develop and implement solutions to address product security incidents across all GitHub products, ensuring scalability and effectiveness.
• Utilize advanced data analysis and forensics techniques to investigate, scope and resolve product security incidents.
• Continuously improve incident response processes and solutions over time.
• Identify and implement automation opportunities to enhance efficiency and effectiveness in incident response operations.
• Develop and maintain automation scripts and tools to streamline response processes and case management.
• Collaborate with internal teams to promote security risk awareness and best practices.

Skills

Product security

Security analysis

Threat modeling

SAST/DAST/SCA

Incident response

GitHub experience

Automation scripting

Education

Bachelor’s degree in CS or related field

Master’s in cybersecurity

Doctorate in related field

Tools

SAST tooling

DAST tooling

SCA tooling

Job description

GitHub, Inc. is seeking a Senior Product Security Incident Response Analyst to design and implement solutions for product security incidents, strengthening policies and automation across GitHub products.

The role emphasizes data-driven analysis and close collaboration with engineering and security teams. The ideal candidate will lead incident response initiatives, develop automation to streamline case management, and help publish CVEs in coordination with partners.