5 months ago
Remote, EMEA or Remote, APACStaff+
Responsibilities
- Set architectural patterns, reference implementations, and foundational security automation for infrastructure security across GitLab.
- Lead infrastructure security initiatives from problem framing through delivery, including scoping multi-quarter work and defining success criteria.
- Conduct and lead security reviews and threat modeling for complex infrastructure components, then drive systemic risk remediation.
- Define the team’s approach to AI-assisted security engineering and establish reusable patterns.
- Represent Infrastructure Security as a technical authority, translating architectural tradeoffs into decisions for engineering teams and senior leadership.
- Partner on technical planning, prioritization, and roadmap development.
- Mentor and develop engineers while promoting inclusive collaboration.
- Secure GitLab infrastructure through internal use of GitLab’s own product.
Requirements
- Expert knowledge of cloud infrastructure security across AWS, GCP, or Azure and container orchestration with Kubernetes.
- Proficiency in multiple programming languages, including Go, Python, and Ruby, with experience delivering production-quality security tooling.
- Extensive experience with Infrastructure-as-Code security using Terraform, Ansible, and CloudFormation, as well as policy-as-code and automated compliance.
- Hands-on experience applying AI to security workflows.
- Experience leading ambiguous, multi-team technical initiatives to measurable outcomes and establishing technical direction adopted by peer teams.
- Strong written and verbal communication skills for explaining security tradeoffs to technical and non-technical audiences, including senior leadership.
- Familiarity with FedRAMP, ISO 27001, SOC 2, and PCI-DSS security certifications, frameworks, and standards.
- Alignment with GitLab’s values and ways of working.
Benefits
- Health, financial, and well-being benefits
- Flexible paid time off
- Team Member Resource Groups
- Equity compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental leave
- Home office support
- Fully remote work arrangement
Tech Stack
Categories
About GitLab
GitLab builds a DevSecOps platform that unifies source code management, CI/CD, and security with AI-assisted workflows for software teams and enterprises. It sells cloud-hosted and self-managed subscriptions, plus enterprise features and support. Founded in 2014 and headquartered in San Francisco, GitLab is a public company listed on NASDAQ and is widely used by large enterprises, including many in the Fortune 100.