2 months ago
Remote, United Kingdom +2 moreSenior
Responsibilities
- Lead and coordinate end-to-end response for high-severity security incidents in a 24/7 global on-call model during EMEA business hours.
- Prepare executive communications and actionable documentation during incidents.
- Investigate complex security incidents across cloud environments using Digital Forensics and Incident Response methodologies.
- Partner with Signals Engineering to implement SIEM use cases, alerting strategies, and telemetry pipelines.
- Build automation and AI-assisted workflows to improve triage, investigation speed, and response consistency.
- Partner with Threat Intelligence to contextualize threats and improve detection coverage.
- Conduct root cause analysis and lead post-incident reviews to reduce risk and drive continuous improvement.
- Develop and maintain runbooks, playbooks, and operational documentation.
- Collaborate cross-functionally during incidents and lead proactive initiatives such as tabletop exercises.
- Mentor other engineers and improve the team’s incident response maturity.
Requirements
- Strong experience in security incident response and investigations in cloud-first environments.
- Experience using or administering Git and GitLab in a security or engineering context.
- Hands-on experience with SIEM, EDR, and/or detection engineering.
- Experience with AWS and GCP cloud platforms.
- Familiarity with threat intelligence and adversary tactics, including MITRE ATT&CK.
- Experience building or using automation with Python, scripting, or SOAR platforms.
- Interest or experience applying AI/ML or data-driven techniques to detection, triage, or response workflows.
- Strong analytical and problem-solving skills with the ability to operate during high-severity incidents.
- Excellent written communication skills and a focus on clear, actionable documentation.
- A proactive approach to identifying and mitigating security risks.
Benefits
- Fully remote work arrangement, with location-based eligibility requirements potentially applying.
- Benefits supporting health, finances, and well-being.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental leave.
Tech Stack
Categories
About GitLab
GitLab builds a DevSecOps platform that unifies source code management, CI/CD, and security with AI-assisted workflows for software teams and enterprises. It sells cloud-hosted and self-managed subscriptions, plus enterprise features and support. Founded in 2014 and headquartered in San Francisco, GitLab is a public company listed on NASDAQ and is widely used by large enterprises, including many in the Fortune 100.