Principal Security Researcher

Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States

Remote

Senior

Full Time

💰$203,200 - $275,000

remotesecurityAIDevSecOpspenetration testingoffensive security

Requirements

•10+ years of experience in security research, penetration testing, or offensive security roles
•Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems
•Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust
•Ability to read and analyze code across multiple languages and codebases
•Strong knowledge of AI frameworks
•Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation
•Experience establishing and driving complex remediation initiatives involving cross-functional teams
•Excellent written communication skills
•Ability to translate complex technical findings into clear risk assessments and remediation recommendations
•Strong analytical and problem-solving skills with creative thinking about attack scenarios

•Conduct and lead security research projects across multiple functional areas
•Identify novel, systemic, and chained vulnerabilities in GitLab
•Validate security vulnerabilities through hands-on testing and develop proof-of-concept exploits
•Assess emerging industry vulnerability classes against the GitLab codebase and drive remediation
•Lead security research into GitLab's AI and agentic surfaces and define security requirements
•Build and direct tooling and automation that scales security research
•Research security posture of open source tools and dependencies integrated with GitLab and report findings
•Solve technical problems of high scope, complexity, and ambiguity
•Help shape the team and sub-department roadmap
•Lead integration of security research results into engineering and business functions
•Teach, mentor, and advise other domain experts and individual contributors
•Share knowledge and novel vulnerability types with the security community