CodeQL Architect - Advanced Security

GitHub helps companies and organizations succeed by allowing them to build better software, together. We're looking for experienced, technical-minded professionals who want to work in partnership with senior engineers and technical teams at our most strategic customers, focused on accelerating and growing their success with GitHub Advanced Security’s Code Scanning capability, specifically with CodeQL, our semantic code analysis language that lets you query code as though it were data. This role will be our customer-facing expert within EMEA for this technology and customer partnership. You’ll gain a deep understanding of the language and it’s capabilities, help customers understand the value in pre-sales environments and provide hands on consultation to demonstrate value and resolve gaps in the capabilities.

The ideal candidate shows a passion to master GitHub’s CodeQL technology, modern application development, and how security vulnerabilities occur in applications today. This candidate is self-driven to develop CodeQL skills to enhance GitHub Advanced Security’s static code analysis queries to empower customers to find solutions to their problems. In addition, they develop solutions for frequent customer problems, before those problems are fully understood and addressed by the engineering team. This candidate will also be able to relate their own experience to communicate not only the capabilities that GitHub’s products and ecosystem can provide, but to ensure our customer’s success.

Field Architects are recognized as senior subject matter experts, in part by their activity in supporting customers where they are (including via industry groups, technical committees, and research opportunities), and by using their ability to synthesize customer experience to provide an industry lens in public presentations and writing. They support a variety of diverse internal teams, including sales professionals, product management, engineering, and marketing in efforts that ensure that GitHub, and our customers, are successful, together. 

We're obsessed about our customers and the quality of our work. If you are technically sharp and people-oriented, you might be a fit for this role!

Responsibilities:

• Use CodeQL to perform Variant Analysis: develop and iterate on novel static analyses to find real vulnerabilities in our customers' code
• Refine and scale analyses so they can be run across 100s of codebases
• Develop Query Language skills to enhance GitHub’s CodeQL static code analysis engine
• Develop solutions for frequent customer problems, before those problems are fully understood and addressed by the engineering team
• support a variety of diverse internal teams, including sales professionals, product management, engineering, and marketing in efforts that ensure that GitHub, and our customers, are successful, together.

Customer interaction: Adept at working with large and strategic corporations with minimal oversight. Possess Technical and Business skills, including:

• Ability to present vision and strategy to CxOs as well as have deeply technical discussions with Engineering leads.
• Flexibility and skill to adapt conversations or messaging on the fly regardless of the participants.
• Familiarity with the Challenger sales methodology

Internal collaboration: Engage in cross functional collaboration within GitHub, including Sales, Professional Services, Technical Product Management, Product Marketing, Engineering, and Marketing. Work with these teams to understand and convey deep customer needs, product roadmap and direction, as well as detailed product and technical capabilities.

• Be an internal expert on customer and industry trends
• Advocating for customer interests within GitHub by communicating customer feedback and perspectives to appropriate teams to be considered in product strategy
• Mentor, pair, and delegate work to encourage the professional and technical growth of those around you

External Collaboration: Build a network of leaders, tastemakers/influencers, and customers to inform your own knowledge of the product and corporate landscape as well as position GitHub as an integral part of the security space. Become a trusted partner with leadership at GitHub’s strategic customers, allowing GitHub to provide an enhanced experience, as well as be better able to position GitHub for future sales opportunities. Build relationships with key decision makers, visiting customers on-site, and serving as a trusted advisor and point of contact

• Learn about customers' successes and challenges
• Bring insights to your efforts that cross territories, regions, and industries
• Participate in working groups, panels, working groups, and industry forums to share your insight

GitHub Advanced Security, Code Scanning expertise: Possesses deep technical knowledge of GitHub’s Code Scanning features capabilities as part of the GitHub Advanced Security product to be able to position them to customers, as well as provide timely answers to their technical questions. You understand the code analysis landscape and market segment, and the needs of users and developers. You are knowledgeable about GitHub’s CodeQL technology.

• Understanding of application SAST/DAST principals, varieties of vulnerabilities and market landscape.
• Strong knowledge of the security community and application security in general
• Ability to write non-trivial CodeQL, our revolutionary declarative logic programming language, to develop sophisticated queries for finding security vulnerabilities.
• Collaborate with the GitHub Security Labs team, the Open Source community and GitHub’s Enterprise customers to create the best analysis libraries possible.

Business Development: Be a partner to the field sales team. Help them understand and improve the relationship with their customers. customer happiness, and plans to assess market opportunity for GitHub Products and Services and aligning resources to meet business goals

• Provide limited, impactful support to High Potential and Strategic sales opportunities as agreed upon by regional leadership
• Identifying customer business requirements and matching them to product features
• Building joint customer strategies with enterprise sales and field services to encourage product adoption
• Support projects and initiatives that provide sales acceleration opportunities

Represent GitHub: You will be a leader for your market and represent GitHub at customer and partner meetings as well as small and large events. You will be a key resource supporting GitHub to hit aggressive sales targets. 

• Deliver live product demonstrations, sales presentations, and lead clients through proof of technology for GitHub products
• Helping customers integrate GitHub products with their existing tools, workflows, and processes
• Public speaking and outreach (including Demand Generation, Public Relations, Analyst Relations, Webinars and Customer Evidence)
• Represent GitHub at local, regional, national, and international events
  

Minimum Qualifications:

• Customer facing experience, presentation skills or experience in technical consulting
• Team-oriented with a desire to help others, and to collaborate with both customers and GitHub team members
• Comfortable working in a fast-paced and dynamic environment
• Strong knowledge and experience of one or more of the following programming languages: C, C++, C#, Java, JavaScript/TypeScript, Python and Go.
• A strong foundation in Computer Science (BSc, MSc, PhD or equivalent practical experience).
• Knowledge of various build tools (Gradle, Maven, Make, …), Continuous Integration tools (Jenkins, GitHub Actions, …). Ability to fix broken builds.
• Knowledge of the Software Development Lifecycle and related tools
• Specific knowledge about application security processes, static analysis testing, and security principles
• Knowledge of common security flaws such as cross-site scripting, ability to explain them and familiarity with best practices to avoid them
• Ability for occasional travel (15%)
• A growth mentality, and a passion for discovering new technologies

Preferred Qualifications:

• Executive level communication skills (both written and verbal) and the ability to mentor others. 
• Passionate about software, technology and business
• 1+ years of experience in Embedded systems
• Understand the value of DevSecOps processes
• Experience with relational databases
• Experience with Query languages; query optimisation; code generation.
• In-depth experience of performing methods such as static analysis; dynamic analysis; control flow; data flow and information flow; security analysis; program transformation; taint analysis; taint tracking.
• Experience with logic programming and declarative programming languages and techniques (e.g. Prolog, Datalog, Haskell, ML).