Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States
Remote
Senior
Full Time
💰$168,000 - $238,000
remotesecurityAIDevSecOpspenetration testingoffensive security
Requirements
- •7+ years of experience in security research, penetration testing, or offensive security roles
- •Hands-on experience discovering and exploiting vulnerabilities
- •Subject matter expert in at least two technical areas impacting product security
- •Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust
- •Ability to read and analyze code across multiple languages and codebases
- •Understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation
- •Experience leading technical objectives in cross-functional teams
- •Excellent written communication skills
- •Ability to translate complex technical findings into clear risk assessments and remediation recommendations
- •Strong analytical and problem-solving skills with creative thinking about attack scenarios
What You'll Do
- •Conduct security research in two or more specialty areas
- •Identify novel, systemic, and chained vulnerabilities in GitLab
- •Validate security vulnerabilities through hands-on testing and develop proof-of-concept exploits
- •Assess emerging industry vulnerability classes against the GitLab codebase and drive remediation
- •Conduct security research into GitLab's AI and agentic surfaces
- •Participate in defining security requirements for engineering teams
- •Build tooling and automation to scale security research
- •Research security posture of open source tools and dependencies and report findings
- •Solve technical problems of high scope, complexity, and ambiguity
- •Define and implement security technical and process improvements
- •Contribute to the team roadmap
- •Provide actionable and constructive feedback to engineering teams
- •Mentor and advise other individual contributors
- •Share knowledge and novel vulnerability types with the security community
Nice to Have
- •Published security research or conference presentations
- •Background in software engineering with distributed systems expertise
- •Security certifications such as OSCP, OSCE, GPEN, or similar
- •Experience with GitLab or similar DevSecOps platforms
- •Experience in AI frameworks
Benefits
- •Benefits to support your health, finances, and well-being
- •Flexible Paid Time Off
- •Team Member Resource Groups
- •Equity Compensation & Employee Stock Purchase Plan
- •Growth and Development Fund
- •Parental Leave
About GitLab
GitLab is a web-based Git repository manager that offers a variety of features for software development teams.
San Francisco, CA, US
1000 - 5000
Developer Tools