3 hours ago
Bengaluru, IndiaMid Level
Responsibilities
- Develop secure, tested, performant parsers for dependency manifests, lockfiles, and SBOMs, and add support for new package ecosystems and formats.
- Build and apply deterministic and AI-driven vulnerability analyzers, evaluate their results, and measure false positives and missed findings against benchmark applications.
- Create CWE-mapped detection rules and supporting test fixtures.
- Package analyzers for CI jobs, AI-agent workflows, and command-line tools while reporting findings in GitLab security report formats.
- Extend the automated remediation service from sandboxed dependency updates through merge request creation.
- Identify and address technical debt, maintain internal coding standards through code review, and participate in on-call troubleshooting.
Requirements
- Professional experience writing and testing production code in a systems language, particularly Go and/or Rust.
- Experience using AI or LLM tools to generate or evaluate technical content with appropriate judgment.
- Willingness to learn vulnerability classes such as OWASP Top 10 and CWE and apply static analysis to detect them.
- Ability to work independently, communicate clearly about technical problems, and propose iterative solutions in a remote asynchronous environment.
- Helpful but not required: experience with Docker, CI/CD, package managers such as npm, Maven, pip, Bundler, or Cargo, web or mobile frameworks, parsing, ASTs, program analysis, detection rules, or evaluation of AI-driven detection against labeled data.
Benefits
- Fully remote work with location-based eligibility requirements that may vary by country.
- Health, financial, and well-being benefits.
- Flexible paid time off.
- Team Member Resource Groups.
- Equity compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental leave.
About GitLab
GitLab builds a DevSecOps platform that unifies source code management, CI/CD, and security with AI-assisted workflows for software teams and enterprises. It sells cloud-hosted and self-managed subscriptions, plus enterprise features and support. Founded in 2014 and headquartered in San Francisco, GitLab is a public company listed on NASDAQ and is widely used by large enterprises, including many in the Fortune 100.