Product Security Incident Response Analyst

About GitHub GitHub is the world’s leading platform for agentic software development — powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot. Locations In this role you can work from Remote, United States Overview As a Senior Product Security Incident Response Analyst, you will design and implement solutions to address product security incidents, enhance security policies, and identify opportunities for automation. The ideal candidate will be a key contributor to strengthening our product security incident response capabilities, driving impactful solutions through automation and policy enhancements while gaining hands-on experience with cutting-edge security strategies and collaborating with industry experts in a dynamic environment.

Develop and Operationalize Solutions:   ● Develop and implement solutions to address product security incidents across all GitHub Products, ensuring scalability and effectiveness.   ● Utilize advanced data analysis and forensics techniques to investigate, scope and resolve product security incidents.   ● Continuously improve incident response processes and solutions over time.       Automation:   ● Identify and implement automation opportunities to enhance efficiency and effectiveness in incident response operations.   ● Develop and maintain automation scripts and tools to streamline response processes and case management.   ● Collaborate with others to prioritize and invest in the most valuable automation opportunities.    Collaboration:   ● Engage with internal teams and external partners to promote security risk awareness and best practices.   ● Translate complex technical information into understandable terms for nontechnical audiences, effectively communicating security risks.   ● Develop and share reports with leaders on security risks and remediation strategies to resolve and mitigate security concerns.   ● Collaborate with architecture teams to integrate security into the design and development of systems and applications, ensuring robust security frameworks are in place from the ground up.       Data-Driven Analysis and Forensics:   ● Analyze key metrics and key performance indicators (KPIs) to identify trends in product security incidents and escalate appropriately.   ● Utilize multiple data sources to conduct and interpret analysis, identifying anomalies and patterns in security data.   ● Leverage forensics techniques to investigate, scope and resolve product security incidents, ensuring thorough and accurate analysis.   ● Recommend improvements and metrics to address gaps in telemetry, measurement and enhance incident response capabilities.       Incident Response Activities:   ● Participate in product security incident response activities, leveraging technical acumen to address and resolve security concerns effectively.   ● Recognize patterns and trends to propose innovative solutions for security improvements, contributing to a culture of continuous enhancement and excellence.   ● Ensure compliance with relevant security regulations and standards, conducting risk assessments and audits to identify and address potential compliance gaps.   ● Coordinate communications and manage stakeholder engagement during product security incidents, ensuring timely, clear updates, and draft and publish CVEs in coordination with relevant teams and partners.

Required Qualifications: ● 7+ years experience in product security, security analysis, security research, cyber security, security engineering, or relevant area   o OR Associate's Degree AND 6+ years experience in security analysis, security research, cyber security, security engineering, or relevant area   o OR Bachelor's Degree AND 5+ years experience in