Staff Engineering Manager, Cloud Security

GitHub is seeking a Staff Engineering Manager to lead the Cloud Security engineering team, which helps protect the cloud infrastructure that powers GitHub at global scale. You will lead a team of security-focused engineers working across multi-cloud security posture, infrastructure security, secure-by-default platform capabilities, and risk reduction across GitHub's production environments, partnering closely with engineering, security, infrastructure, compliance, and product teams. You will create the conditions for a high-performing team to do its best work: setting clear priorities, coaching engineers, improving execution, and ensuring the team delivers security outcomes that are technically sound, scalable, and measurable.

Responsibilities

• Lead and grow a distributed Cloud Security engineering team, creating clarity around priorities, ownership, execution, and impact.
• Partner with Security, Infrastructure, Platform, Product, and Engineering leaders to define and deliver a technical roadmap that reduces cloud security risk across GitHub.
• Drive initiatives across secure infrastructure configuration, identity and access, vulnerability and exposure management, incident response readiness, and secure-by-default platform capabilities.
• Guide the team in designing scalable, reliable, and observable security systems that integrate with GitHub's engineering workflows.
• Coach and develop engineers, support career growth, manage performance, and foster a culture of ownership and continuous improvement.
• Champion engineering excellence through automation, tooling, and standardization that make secure outcomes easier for GitHub engineering teams.
• Partner with incident response, governance, risk, and compliance teams so cloud security investments improve both real-world posture and auditability.

Qualifications

• 10+ years of experience in security analysis, security research, cyber security, security engineering, or a relevant area, or an equivalent combination of education and experience.
• 2+ years of people management experience.
• Preferred: 5+ years securing one or more cloud platforms such as Azure, AWS, or Google Cloud.
• Preferred: 3+ years with cloud security posture management, IaC security, container and Kubernetes security, IAM, secrets management, vulnerability management, detection engineering, or incident response.
• Preferred: experience operating in large-scale SaaS, developer platform, enterprise software, or high-compliance environments.
• Preferred: experience with application security tools (SAST, DAST, SCA) and security review activities such as threat modeling and architecture review.