Senior Software Engineer, Vulnerability Management

GitHub, Inc.; United States; Remote; USD 124,000 - 329,000; Full time

Job summary

GitHub is seeking a Senior Software Engineer to join the Vulnerability Management Engineering team.

You will design, build, and operate systems that identify vulnerabilities across GitHub’s services and infrastructure, route findings to the owning team, and enforce software supply chain controls for packages, images, and code scanning.

Qualifications

• 6+ years experience in Software Engineering with production coding in languages listed above.
• Associate’s Degree + 5+ years experience with production coding in listed languages.
• Bachelor’s Degree + 4+ years experience with production coding in listed languages.
• Master’s Degree + 2+ years experience with production coding in listed languages.
• Doctorate in Computer Science or related field or equivalent experience.

Responsibilities

• Design, develop, test and ship high-quality technical solutions that scale across multiple GitHub services.
• Build the platform that collects security findings from container image, cloud, host, and code scanning, and tracks remediation through risk scoring and SLAs.
• Design and roll out software supply chain controls across GitHub Actions, Docker builds, and Dependabot so teams can adopt without slowdown.
• Build systems that meet compliance requirements such as FedRAMP and evolve production services without breaking APIs.
• Collaborate with cross-functional teams to define and implement innovative solutions.
• Provide technical leadership, mentorship, pairing opportunities, and code reviews to grow others.
• Own and advocate for the health and quality of the systems, including on-call rotations.
• Write architecture briefs and prototypes to learn scalable designs.
• Write maintainable code and become intimately familiar with the systems you build.

Skills

Programming languages

Education

Associate’s Degree in CS/related

Bachelor’s Degree in CS/related

Master’s Degree in CS/related

Doctorate in CS/related

Equivalent experience

Job description

About GitHub

GitHub is the world’s leading platform for agentic software development — powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.

Locations

In this role you can work from Remote, United States

Overview

Securing the home for all developers starts with securing GitHub itself. As a Senior Software Engineer on the Vulnerability Management Engineering team, you’ll build and run the systems that find vulnerabilities across GitHub’s services and infrastructure, get each one to the team that owns it, and control how our code, packages, and container images are sourced and built. It’s backend and distributed systems work where the users are other engineers, and you’ll build deep expertise in vulnerability management and software supply chain security along the way.

We are looking for creative problem solvers and diverse thinkers, people who care about culture as well as customers and features. We believe that how we do things is as important as what we do. Big vision, a common purpose, passion for quality, curiosity, dedication, and investment in fun and collaboration are what lead to great results. Great products reflect the teams that build them.

Responsibilities

• Design, develop, test and ship high-quality technical solutions that scale across multiple GitHub services.
• Build the platform that collects security findings from container image, cloud, host, and code scanning, matches each finding to the team that owns it, and tracks remediation through risk scoring, SLAs, and exceptions.
• Design and roll out software supply chain controls, such as authenticated package and container proxies that enforce policy, across GitHub Actions, Docker builds, and Dependabot, in a way teams can adopt without slowing down.
• Build systems that meet compliance requirements such as FedRAMP, and evolve production services without breaking the APIs other teams rely on.
• Collaborate with cross-functional teams, including service owners, platform engineering, cloud security, and compliance, to define and implement innovative solutions.
• Provide technical leadership, mentorship, pairing opportunities, and code reviews to encourage the growth of others.
• Own and advocate for the health and quality of the systems that the team builds, including participating in on-call and first responder rotations.
• Write architecture briefs and proposals, carry out code experiments, and build prototypes to learn how we can achieve planetary scale with our systems.
• Become intimately familiar with the systems you build and take pride in writing maintainable code.

Qualifications

Required Qualifications

• 6+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python
• OR Associate’s Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 5+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python
• OR Bachelor’s Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 4+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python
• OR Master’s Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 2+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python
• OR Doctorate in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field.
• OR equivalent experience.

Preferred Qualifications

• 2+ years experience using general purpose and scripting languages (e.g., Go, Python, or a similar language).
• 3+ years experience with cloud environments and/or Cloud Native Computing Foundation (CNCF) concepts.

Compensation Range

The base salary range for this job is USD $124,000.00 - USD $329,200.00 /Yr.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.

GitHub values

• Customer-obsessed
• Ship to learn
• Growth mindset
• Own the outcome
• Better together
• Diverse and inclusive

Manager fundamentals

• Model
• Coach
• Care

Leadership principles

• Create clarity
• Generate energy
• Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote‑first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are—because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together.

EEO Statement

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!