Product Security Engineer III

Security through code rather than review: static analysis pipelines, secret scanning workflows, dependency analysis, supply chain defences and agentic security tooling, built as internal platforms that other teams consume.

The framing that matters is preventing classes of vulnerabilities rather than fixing individual instances. That is the difference between a security team that scales and one that becomes a queue. US remote, Ruby, Python and Go. The band starts lower than GitHub's staff postings, so this is a genuine mid-level entry point into product security.