Staff Threat Intelligence Analyst

About GitHub

As the global home for all developers, GitHub is the complete AI-powered developer platform to build, scale, and deliver secure software. Over 100 million people, including developers from 90 of the Fortune 100 companies, use GitHub to build amazing things together across 330+ million repositories. With all the collaborative features of GitHub, it has never been easier for individuals and teams to write faster, better code. **

Locations**

In this role you can work from Remote, United States **

Overview**

GitHub is looking for a threat intelligence analyst to protect GitHub from cyber threats.

If you have experience conducting technical and open source threat intelligence investigations, strong written and verbal communication skills, and are comfortable working on multiple projects to solve complex security problems, we want to hear from you! **

About The Role**

GitHub’s Threat Intelligence team uses data from a variety of open, closed and internal sources to gain insight into adversary activity and drive intelligence-informed security countermeasures across GitHub.

We are looking for an experienced analyst to join and develop our threat intelligence team. This role will focus on researching and operationalizing high-quality threat intelligence - helping the team drive secure outcomes across GitHub products and infrastructure. **

Responsibilities**

• Develop and maintain subject matter expertise in a portfolio of threats to GitHub, our customers, employees, infrastructure and the wider open source community from all available sources.
• Provide actionable information by producing appropriate, relevant and concise analysis for stakeholders including teams within Engineering, Security and executive leadership.
• Provide analytic support to GitHub security teams.
• Build and maintain strategic partnerships with internal and external teams to better understand and track threats to GitHub and our customers.
• Evaluate the risks of emerging threats, such as influence and cyber-enabled influence operations.
• Design, develop and maintain automation tools to assist in investigations.
• Coordinate disruption efforts against sophisticated misuse of the GitHub platform by advanced threat actors.
• Present sanitized intelligence to broad internal audiences to improve security awareness across the company

Qualifications

Required Qualifications:

• 8+ years experience in cyber security, security analysis, security engineering, or relevant areas
• 5+ years of threat intelligence analysis and investigations experience with a focus on tracking and disrupting advanced persistent threat adversaries
• 2+ years of experience building tools and automation in collaborative codebases using Python and/or other programming languages
• Professional experience in security fundamentals, networking, vulnerability management, cryptography, supply-chain risks, and modern identity and access management technologies
• Comprehensive knowledge and experience of the cyber threat landscape on large web platforms, including trends in threat actor infrastructure, attack vectors, tooling, and tactics, coupled with strong evidence handling and documentation skills.

Preferred Qualifications:

• Outstanding written and verbal communication skills
• Proficient in Pandas and Jupyter notebooks
• Knowledge of open source intelligence tools and methods, Linux and MacOS systems, git and GitHub, and various query languages such as SQL, Splunk and KQL
• Strong understanding of international relations and geopolitical analysis in relevant areas of concern
• Ability to prioritize tasks in a fast-paced environment, handle sensitive information securely, and work autonomously in a global, distributed setting
• High degree of comfort managing information sharing relationships
• Experience investigating account takeovers, scams/fraud, malware distribution vectors, and ransomware

Compensation Range

The base salary range for this job is USD $118,100.00 - USD $313,300.00 /Yr.

In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.

These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role. **

GitHub values**

• Customer-obsessed
• Ship to learn
• Growth mindset
• Own the outcome
• Better together
• Diverse and inclusive

Manager fundamentals

• Model
• Coach
• Care

Leadership principles

• Create clarity
• Generate energy
• Deliver success

Who We Are

GitHub is the world’s leading AI-powered developer platform with 100 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.

Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are—because we know that people flourish when they can work on their own terms.

Join us, and let’s change the world, together. **

EEO Statement**

GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!