As a Staff-level advocate, you bring cross-team influence and deep technical expertise across multiple areas. You don't just execute — you set direction, establish frameworks that help others produce great security content, and proactively identify highly impactful unaddressed issues, mobilizing resources to resolve them before they affect the community. You mentor and sponsor others within the team, and you use data and business outcomes to inform decisions and influence stakeholders across GitHub.
Responsibilities
Understanding the Security Community
Acts as a known subject matter expert of the security research and open source developer communities — their common experiences, goals, industry trends, and key developments — by meeting with community members, attending security and developer conferences, and engaging on social media. Possesses expert knowledge of GitHub's security products and services (CodeQL, code scanning, secret scanning, Dependabot, advisory database) and their potential impact on the broader security ecosystem. Strategically seeks out influencers in the security and open source spaces to understand business drivers and community objectives. Anticipates future changes in the application security landscape, including the impact of AI on security research workflows and the emerging challenges of securing AI-generated code.
Building Trusted Relationships
Acts as a trusted and influential ambassador between the security community and GitHub's product, engineering, and marketing teams. Builds and maintains a broad, diverse network across security researchers, open source maintainers, and enterprise security teams. Utilizes deep understanding of community needs to share valuable insights, best practices, and technical know-how, maintaining thought leadership within the security community.
Internal Advocacy and Impact
Collects and seeks out feedback from the security community and stakeholders regarding product usage, user experience, and technical issues. Communicates clearly and effectively to relevant product groups, advocating for and influencing urgent and long-term improvements to GitHub's security features. Proactively builds and manages networks of key stakeholders and leads engagement through established and informal channels to provide feedback on priorities and emerging security scenarios. Incorporates data and key metrics into findings regarding value-add and impact of advocacy initiatives. Ensures the feedback loop between community members, the Security Lab, and the GitHub product team is effective.
Supporting Key Internal Initiatives
Builds and enhances trust with internal teams through networking and engagement regarding security product improvement plans. Acts as a subject matter expert for internal stakeholders on application security and the security researcher community. Regularly engages in retrospective evaluations to inform future work.
Content Development
Defines, creates, and leads the technical content strategy for the Security Lab — blog posts, tutorials, training courses, videos, CTFs, puzzles, and conference talks — covering topics from traditional vulnerability research to AI-assisted security analysis and secure AI development practices. Drives interactions across technical forums, social media, and community channels to promote awareness and provide best practices. Represents the GitHub Security Lab at high-visibility security and developer conferences, hackathons, and meetups. Sets the standard for content quality and measures impact to continuously improve how we communicate with the security community.
Community Impact
Actively seeks out feedback and listens to the needs of the security community, responding with relevant information and upskilling others to make a substantial impact on community growth. Designs the community member journey — from first engagement to active contributor — measuring retention and engagement along the way. Proposes strategic improvements to the community experience. Manages the Security Lab's social media presence and public forums. Applies deep knowledge of GitHub's security products, stakeholders, and strategic objectives to influence and inspire the audience.
Technical Expertise
Possesses deep technical expertise in application security, secure code practices, vulnerability research, AI-assisted code analysis, and static analysis. Constantly seeks out learning and teaching opportunities and engages in conversations with key security researchers and developers to understand current developments and issues. Applies and practices technical expertise via sample code, CodeQL queries, security advisories, and demonstrations. Builds processes and systems to share technical expertise at scale and works within the industry to help inform future security developments. Understands the security implications of AI-generated code and AI-powered development tools, and can communicate best practices for secure AI adoption to both security researchers and developers. Gains broader knowledge of adjacent technologies and incorporates them into current areas of expertise.
Qualifications
Required Qualifications
10+ years experience in community/audience engagement, information technology, software development, or related work
OR Bachelor's Degree AND 8+ years experience in community/audience engagement, information technology, software development, or related work
OR equivalent experience
Delivered at least one technical keynote on a security topic at a developer conference with 1,000+ attendees
OR delivered a session at a major security conference (Black Hat, DEF CON, etc)
OR published regular content (blog, podcast) on security and open source topics
2+ years of experience in application security, secure code practices, or vulnerability research
OR 2+ years of experience in a Developer Advocacy function on application security, secure code practices, or vulnerability research topics
OR contributions to open source security projects or security-focused open source tools
4+ years of experience working with Git, GitHub, and software development practices
Preferred Qualifications
13+ years experience in community/audience engagement, information technology, software development, public speaking, technical writing, or related work
OR Bachelor's Degree AND 11+ years experience in community/audience engagement, information technology, software development, public speaking, technical writing, or related work
OR equivalent experience
2+ years of experience with static analysis tools like CodeQL
2+ years of active participation in security communities
OR 2+ years of active participation in open source maintainer communities with a focus on security
OR 2+ years of mentoring or teaching application security, secure code practices, or vulnerability research
At least one public contribution (content, open source tooling) on AI/ML security topics — such as securing AI-generated code, AI-assisted vulnerability discovery, or red-teaming LLM-based tools
Compensation Range
The base salary range for this job is USD $121,800.00 - USD $323,200.00 /Yr.
These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.
This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.
GitHub values
Customer-obsessed
Ship to learn
Growth mindset
Own the outcome
Better together
Diverse and inclusive
Manager fundamentals
Model
Coach
Care
Leadership principles
Create clarity
Generate energy
Deliver success
Who We Are
GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.
Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are—because we know that people flourish when they can work on their own terms.
Join us, and let’s change the world, together.
EEO Statement
GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!
Understanding the Security Community
Acts as a known subject matter expert of the security research and open source developer communities — their common experiences, goals, industry trends, and key developments — by meeting with community members, attending security and developer conferences, and engaging on social media. Possesses expert knowledge of GitHub's security products and services (CodeQL, code scanning, secret scanning, Dependabot, advisory database) and their potential impact on the broader security ecosystem. Strategically seeks out influencers in the security and open source spaces to understand business drivers and community objectives. Anticipates future changes in the application security landscape, including the impact of AI on security research workflows and the emerging challenges of securing AI-generated code.
Building Trusted Relationships
Acts as a trusted and influential ambassador between the security community and GitHub's product, engineering, and marketing teams. Builds and maintains a broad, diverse network across security researchers, open source maintainers, and enterprise security teams. Utilizes deep understanding of community needs to share valuable insights, best practices, and technical know-how, maintaining thought leadership within the security community.
Internal Advocacy and Impact
Collects and seeks out feedback from the security community and stakeholders regarding product usage, user experience, and technical issues. Communicates clearly and effectively to relevant product groups, advocating for and influencing urgent and long-term improvements to GitHub's security features. Proactively builds and manages networks of key stakeholders and leads engagement through established and informal channels to provide feedback on priorities and emerging security scenarios. Incorporates data and key metrics into findings regarding value-add and impact of advocacy initiatives. Ensures the feedback loop between community members, the Security Lab, and the GitHub product team is effective.
Supporting Key Internal Initiatives
Builds and enhances trust with internal teams through networking and engagement regarding security product improvement plans. Acts as a subject matter expert for internal stakeholders on application security and the security researcher community. Regularly engages in retrospective evaluations to inform future work.
Content Development
Defines, creates, and leads the technical content strategy for the Security Lab — blog posts, tutorials, training courses, videos, CTFs, puzzles, and conference talks — covering topics from traditional vulnerability research to AI-assisted security analysis and secure AI development practices. Drives interactions across technical forums, social media, and community channels to promote awareness and provide best practices. Represents the GitHub Security Lab at high-visibility security and developer conferences, hackathons, and meetups. Sets the standard for content quality and measures impact to continuously improve how we communicate with the security community.
Community Impact
Actively seeks out feedback and listens to the needs of the security community, responding with relevant information and upskilling others to make a substantial impact on community growth. Designs the community member journey — from first engagement to active contributor — measuring retention and engagement along the way. Proposes strategic improvements to the community experience. Manages the Security Lab's social media presence and public forums. Applies deep knowledge of GitHub's security products, stakeholders, and strategic objectives to influence and inspire the audience.
Technical Expertise
Possesses deep technical expertise in application security, secure code practices, vulnerability research, AI-assisted code analysis, and static analysis. Constantly seeks out learning and teaching opportunities and engages in conversations with key security researchers and developers to understand current developments and issues. Applies and practices technical expertise via sample code, CodeQL queries, security advisories, and demonstrations. Builds processes and systems to share technical expertise at scale and works within the industry to help inform future security developments. Understands the security implications of AI-generated code and AI-powered development tools, and can communicate best practices for secure AI adoption to both security researchers and developers. Gains broader knowledge of adjacent technologies and incorporates them into current areas of expertise.
Required Qualifications
10+ years experience in community/audience engagement, information technology, software development, or related work
OR Bachelor's Degree AND 8+ years experience in community/audience engagement, information technology, software development, or related work
OR equivalent experience
Delivered at least one technical keynote on a security topic at a developer conference with 1,000+ attendees
OR delivered a session at a major security conference (Black Hat, DEF CON, etc)
OR published regular content (blog, podcast) on security and open source topics
2+ years of experience in application security, secure code practices, or vulnerability research
OR 2+ years of experience in a Developer Advocacy function on application security, secure code practices, or vulnerability research topics
OR contributions to open source security projects or security-focused open source tools
4+ years of experience working with Git, GitHub, and software development practices
Preferred Qualifications
13+ years experience in community/audience engagement, information technology, software development, public speaking, technical writing, or related work
OR Bachelor's Degree AND 11+ years experience in community/audience engagement, information technology, software development, public speaking, technical writing, or related work
OR equivalent experience
2+ years of experience with static analysis tools like CodeQL
2+ years of active participation in security communities
OR 2+ years of active participation in open source maintainer communities with a focus on security
OR 2+ years of mentoring or teaching application security, secure code practices, or vulnerability research
At least one public contribution (content, open source tooling) on AI/ML security topics — such as securing AI-generated code, AI-assisted vulnerability discovery, or red-teaming LLM-based tools
