GitHub

GitHub

Product Security Engineer III

United States · Mid

Sponsorship not specifiedDetected 161 days ago
GoRubyGitCI/CDCybersecuritySupply ChainResearchLeadership

Stay score

odds of building a lasting career here

37Risky
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card follow-through: 100%

Of 5 labor certifications old enough to have been used, 0 expired without the employer filing the next step. Median time from filing to decision: 483 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

1 transfer filing in the last year, covering 1 worker. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • The ideal candidate is a strong software engineer who is passionate about application security and wants to solve security problems through code.

Responsibilities

  • Design, build, and maintain security tooling and automation, including static analysis pipelines, secret scanning workflows, and dependency analysis systems.
  • Build and improve agentic security tooling for automated triage, assessment, and remediation of security findings.
  • Develop security libraries, CI/CD integrations, and developer-facing tools that make the secure path the default path for engineering teams.
  • Contribute to supply chain security defenses, building detection and prevention systems that protect GitHub's software supply chain.
  • Collaborate with teams across the organization to address security risks and define new requirements and feature sets.
  • Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.
  • This is a hands-on engineering role focused on building internal security platforms, tooling, and automation that protect GitHub's products at scale.
  • You will design, build, and maintain the systems that make
  • Own the outcome
  • Create clarity

Requirements

  • 5+ years experience in security analysis, security research, cyber security, security engineering, or relevant area
  • OR Associate's Degree in a related field AND 4+ years experience in security analysis, security research, cyber security, security engineering, or relevant area
  • OR Bachelor's Degree in a related field AND 3+ years experience in security analysis, security research, cyber security, security engineering, or relevant area
  • OR Master's Degree in a related field AND 1+ year(s) experience in security analysis, security research, cyber security, security engineering, or relevant area
  • 3+ years experience programming in at least 2 of these 3 coding languages: Ruby, Go, Python.
  • Required Qualifications:
  • OR equivalent experience.
  • 1+ year(s) of experience in building security tooling and implementing solutions in complex environments.

Nice to have

  • Experience with static analysis tools (SAST/DAST), code scanning frameworks, or custom rule authoring.
  • Familiarity with software supply chain security concepts and tooling.
  • Experience working in large-scale monolith or distributed service codebases.
  • Familiarity with GitHub's products, platform, and developer ecosystem.
  • Strong expertise in security principles, including the Security Development Lifecycle (SDL), and experience in vulnerability management.
  • Compensation Range
  • These pay ranges are intended to cover roles based across the United States.
  • These rewards are allocated based on individual impact in role.

Compensation

  • The base salary range for this job is USD $107,700.00 - USD $285,900.00 /Yr.
  • These pay ranges are intended to cover roles based across the United States.
  • An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant.
  • At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock.

Company info

  • GitHub is the world's leading AI-powered developer platform with 150 million developers and counting.
  • We're also home to the biggest open-source community on earth (and 99% of the world's software has open-source code in its DNA).
  • Many of the apps and programs you use every day are built on GitHub.
  • Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!).
  • At GitHub, our goal is to create the space you need to do your best work.
  • We're remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are-because we know that people flourish when they can work on their own terms.
  • Join us, and let's change the world, together.
  • EEO Statement
  • GitHub is made up of people from a wide variety of backgrounds and lifestyles.
  • We embrace diversity and invite applications from people of all walks of life.
  • We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences.
  • Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!
  • GitHub is transforming how the world builds secure software, and we are looking for a Product Security Engineer III to join our Product Security Engineering team.
  • GitHub is the world's leading platform for agentic software development - powered by Copilot to build, scale, and deliver secure software.

Visa & Work Authorization

  • ployees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences
Apply directly at GitHub →Create a free account for alerts like thisView GitHub immigration profile

This listing is sourced directly from GitHub's careers page and normalized into a canonical job model.