2 months ago
Remote, United States +3 moreStaff+
Base Salary
$168k - $238k/yr
Responsibilities
- Conduct security research across at least two specialty areas and identify novel, systemic, and chained vulnerabilities.
- Validate vulnerabilities through hands-on testing and proof-of-concept exploit development.
- Research AI and agentic security surfaces, including attack scenarios involving GitLab AI workflows.
- Build tooling and automation for scalable security research and agent-assisted vulnerability discovery.
- Assess the security posture of open-source tools and dependencies, report findings, and track mitigation.
- Define security and process improvements, contribute to the team roadmap, and provide actionable feedback to engineering teams.
- Mentor and advise individual contributors and share vulnerability research with the security community.
Requirements
- 7+ years of experience in security research, penetration testing, or offensive security roles.
- Hands-on experience discovering and exploiting vulnerabilities.
- Subject matter expertise in at least two technical areas affecting product security.
- Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust.
- Ability to read and analyze code across multiple languages and codebases.
- Understanding of AI attack vectors such as prompt injection, agent manipulation, and workflow exploitation.
- Experience leading technical objectives in cross-functional teams.
- Strong written communication, analytical, problem-solving, and technical risk-assessment skills.
- Preferred qualifications include published security research or conference presentations, distributed-systems software engineering experience, OSCP, OSCE, GPEN, or similar certifications, and experience with GitLab or similar DevSecOps platforms.
Benefits
- Fully remote work arrangement.
- Benefits supporting health, finances, and well-being.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental leave.
Tech Stack
Categories
About GitLab
GitLab builds a DevSecOps platform that unifies source code management, CI/CD, and security with AI-assisted workflows for software teams and enterprises. It sells cloud-hosted and self-managed subscriptions, plus enterprise features and support. Founded in 2014 and headquartered in San Francisco, GitLab is a public company listed on NASDAQ and is widely used by large enterprises, including many in the Fortune 100.