GitHub

GitHub

Staff Security Researcher

United States · Staff+

Sponsorship not specifiedDetected 167 days ago
GitAgentic AICybersecurityResearchLeadershipMentoringPublic Speaking

Stay score

odds of building a lasting career here

37Risky
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card follow-through: 100%

Of 5 labor certifications old enough to have been used, 0 expired without the employer filing the next step. Median time from filing to decision: 483 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

1 transfer filing in the last year, covering 1 worker. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • GitHub is seeking a Staff Security Researcher to join the GitHub Security Lab team.
  • We're looking for someone with deep expertise in code security and an easily verifiable track record of finding critical security vulnerabilities.
  • In this role, you will find and report vulnerabilities in open source projects.

Responsibilities

  • High impact security research - Identifies, conducts, and supports others in conducting research into critical security areas, current attacks, adversary tracking, and academic literature.
  • Build tools that help to secure open source - Works with others to synthesize research findings into recommendations for mitigation of security issues.
  • Internal influence - Helps to make connections and assists in developing agreements among groups to clarify priorities, dependencies, and provides coordination across groups.
  • Identifies, conducts, and supports others in conducting research into critical security areas, current attacks, adversary tracking, and academic literature.
  • Build tools that help to secure open source
  • Own the outcome
  • Create clarity
  • Deliver success

Requirements

  • You have been personally credited with finding one or more high/critical severity CVEs in products or projects.
  • You have published one or more blog posts on security topics
  • OR you have presented at a security conference.
  • 10+ years experience in security research, cyber security, security analysis, security engineering, software development, or relevant areas
  • OR Associate's Degree AND 9+ years experience in security research, cyber security, security analysis, security engineering, software development, or relevant area
  • OR Bachelor's Degree AND 8+ years experience in security research, cyber security, security analysis, security engineering, software development, or relevant area
  • OR Master's Degree AND 6+ years experience in security research, cyber security, security analysis, security engineering, software development, or relevant area
  • OR Doctorate AND 4+ years experience in cyber security, security analysis, security engineering, software development, or relevant area
  • Required Qualifications

Nice to have

  • Easily verifiable track record of finding high impact vulnerabilities in open source projects.
  • You have given (main-stage, non-sponsored) presentations at top security conferences.
  • Experience using AI to find vulnerabilities.
  • Experience in the emerging area of AI vulnerabilities, such as prompt injection attacks.
  • 14+ years experience in security research, cyber security, security analysis, security engineering, software development, or relevant areas
  • OR Associate's Degree AND 13+ years experience in security research, cyber security, security analysis, security engineering, software development, or relevant area
  • OR Bachelor's Degree AND 12+ years experience in security research, cyber security, security analysis, security engineering, software development, or relevant area
  • OR Master's Degree AND 10+ years experience in security research, cyber security, security analysis, security engineering, software development, or relevant area

Skills

  • About GitHub
  • In this role you can work from Remote, United States

Compensation

  • The base salary range for this job is USD $140,400.00 - USD $372,300.00 /Yr.
  • These pay ranges are intended to cover roles based across the United States.
  • An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant.
  • At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock.

Company info

  • GitHub is the world's leading AI-powered developer platform with 150 million developers and counting.
  • We're also home to the biggest open-source community on earth (and 99% of the world's software has open-source code in its DNA).
  • Many of the apps and programs you use every day are built on GitHub.
  • Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!).
  • At GitHub, our goal is to create the space you need to do your best work.
  • We're remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are-because we know that people flourish when they can work on their own terms.
  • Join us, and let's change the world, together.
  • EEO Statement
  • GitHub is made up of people from a wide variety of backgrounds and lifestyles.
  • We embrace diversity and invite applications from people of all walks of life.
  • We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences.
  • Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!
  • Our culture is built on developer empathy, transparency, and inclusive collaboration.
  • Be the customer's voice - Solicits input from customers and partners to improve security issues.

Visa & Work Authorization

  • ployees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences
Apply directly at GitHub →Create a free account for alerts like thisView GitHub immigration profile

This listing is sourced directly from GitHub's careers page and normalized into a canonical job model.