3 days ago
Remote, United Kingdom +2 moreSenior
Responsibilities
- Lead and coordinate end-to-end response for high-severity security incidents in a 24/7 global on-call model during EMEA business hours.
- Prepare executive communications and actionable documentation during incidents.
- Investigate complex security incidents across cloud environments using Digital Forensics and Incident Response methodologies.
- Partner with Signals Engineering to implement SIEM use cases, alerting strategies, and telemetry pipelines.
- Build automation and AI-assisted workflows to improve triage, investigation speed, and response consistency.
- Partner with Threat Intelligence to contextualize threats and improve detection coverage.
- Conduct root cause analysis and lead post-incident reviews to reduce risk and drive continuous improvement.
- Develop and maintain runbooks, playbooks, and operational documentation.
- Collaborate cross-functionally during incidents and lead proactive initiatives such as tabletop exercises.
- Mentor other engineers and improve the team’s incident response maturity.
Requirements
- Strong experience in security incident response and investigations in cloud-first environments.
- Experience using or administering Git and GitLab in a security or engineering context.
- Hands-on experience with SIEM, EDR, and/or detection engineering.
- Experience with AWS and GCP cloud platforms.
- Familiarity with threat intelligence and adversary tactics, including MITRE ATT&CK.
- Experience building or using automation with Python, scripting, or SOAR platforms.
- Interest or experience applying AI/ML or data-driven techniques to detection, triage, or response workflows.
- Strong analytical and problem-solving skills with the ability to operate during high-severity incidents.
- Excellent written communication skills and a focus on clear, actionable documentation.
- A proactive approach to identifying and mitigating security risks.
Benefits
- Fully remote work arrangement, with location-based eligibility requirements potentially applying.
- Benefits supporting health, finances, and well-being.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental leave.
Tech Stack
Categories
About GitLab
GitLab is the Intelligent Orchestration Platform where software teams and their AI agents stay in flow to amplify their capacity for innovation. Together, they automate repetitive tasks to plan, build, secure, test, deploy and maintain software. With GitLab, software teams spend less time on coordination overhead and more time on the next big idea. GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle. Agents handle code generation, security analysis, code review, CI/CD troubleshooting, and custom workflows — while teams maintain control through enterprise governance. Build what's next with us. Explore open roles and join our talent community: https://about.gitlab.com/jobs/