Director of Product Management

### Who you are - 8+ years experience in product/service/project/program management, software development, product design, or related field - OR Bachelor's Degree in related field AND 6+ years experience in product/service/project/program management, software development, product design, or related field - OR equivalent experience - 2+ years in developing deep expertise in developer tools, developer platforms, or security products, enabling clear translation of developer requirements into roadmap-ready features - 3+ years people management experience - Experience owning a product area end to end as an individual contributor, and experience leading or developing other product managers - Hands-on experience with software supply chain security: SCA and dependency management, package registries and ecosystem tooling, SBOMs, provenance and attestations, or malware detection in open source packages - Experience directly managing product managers, including hiring, coaching across experience levels, and performance management - Track record of building a coherent product line out of separately managed capabilities, including the hard consolidation and deprecation calls - Experience with packaging, pricing, or consumption-based commercial model decisions - Proven cross-functional collaboration: You bring a history of success partnering with Engineering, Design, Sales, and Customer Success to deliver projects that involve complex technical problems ### What the job involves - We're looking for a Director of Product Management to own that portfolio and build the platform, so customers can answer one question: can I trust this software, and can I prove it? This is a player-coach role. You'll lead a PM team and carry direct product ownership of the hardest problems in the segment - One platform, not a set of tools. GitHub's supply chain capabilities are strong individually and don't yet add up to an experience a customer can reason about. You'll set the vision that unifies dependency security, artifact trust and provenance, and package governance, and make the branding, packaging, and unification calls that follow - The application graph. The real risk of a vulnerability, and what it takes to fix it, depends on how code, repos, artifacts, and applications connect. You'll build that connective tissue, turCan yning isolated findings into a clear picture of what's affected and what remediation requires - Risk that actually matters. Security teams are measured on what they fix, not what they find. You'll define how GitHub surfaces the risk worth acting on and carries a fix through to done, at a scale and ecosystem breadth no point solution can match - Trust as a default of shipping software. Verifiable provenance is still an expert workflow. You'll make it a normal property of building on GitHub, generated as software is created rather than reconstructed afterward, and applied to what developers and coding agents pull in alike - Analysis of Customer & Market Signals: - Prioritize customer needs through direct engagement with enterprise security teams, platform engineering leaders, and the open source community - Seek the truth in the usage data. Nobody has more of it than GitHub. Let evidence overrule assumptions about how the product is really performing - Turn the competitive landscape into roadmap decisions, not feature parity checklists - Product/Service Definition: - Own the vision and multi-year strategy for supply chain security, including what we build, what we bring together, what we retire, and where we don't play - Carry direct product ownership of the most strategically important problems in the segment - Define the metrics that show whether the portfolio is working, and hold the team to them - Team Leadership: - Lead and develop a team of product managers at varying seniority levels. Set the performance bar, coach, and own career development - Partner closely with your engineering and design leadership counterpart on staffing, delivery, and how the business operates - Go-To-Market & Delivery: - Own the partnership with Microsoft Security. Microsoft brings world-class security research, threat intelligence, and enterprise reach that we put to work in the developer and security workflows where fixes actually land - Shape packaging and pricing direction for the segment, and own its adoption and revenue outcomes - Carry the product vision to executive briefings, analysts, and the developer community, and provide thought leadership across GitHub and Microsoft ### Benefits - Flexible time away to support balance in your work and life - Clear diversity, inclusion, and anti-discrimination policies backed by business practices and company culture - 100% of medical, dental, and vision insurance premiums covered by GitHub for you + your dependents. (Includes gender-affirming benefits) - Five months of paid family leave to all new parents with the option to use it all at once or throughout the child’s first year - Family forming benefits that cover fertility, infertility, adoption, and surrogacy costs and support - Mental health benefits that offer resources and support and cover therapy and coaching sessions for you and your dependents - Generous 401(k) matching with 50% match up to the IRS 402(g) limit (US; competitive non-US pension options internationally) - Employee stock purchase plan that lets you purchase Microsoft stock at a discount. (Microsoft is our parent company.)