About the company
GitLab is the intelligent orchestration platform for DevSecOps. More than 50 million registered users and more than 50% of the Fortune 100 trust GitLab to ship better, more secure software faster.
Responsibilities
- Act as the directly responsible individual (DRI) for team initiatives from design through delivery
- Bring systems built by one engineer to team ownership through documentation, tests, and shared review
- Design and ship analyzers that pair deterministic analysis capabilities with AI-driven analysis, and build evaluation harnesses that measure false positives and missed findings against benchmark applications
- Package analyzers for CI jobs, AI agent workflows, and command-line tools, with findings reported in GitLab's standard security report formats
- Design and ship manifest, lockfile, and SBOM parsing that tells the static analysis engine what a project depends on
- Ship features across the automated remediation service that turns security advisories into dependency update merge requests
- Solve technical problems of high scope and complexity
- Mentor Intermediate engineers through code review and pairing
- Participate in on-call rotations
Requirements
- Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations
- Substantial professional experience writing and testing production code in a systems language, particularly Go and/or Rust
- Familiarity with package managers and dependency management in one or more language ecosystems, such as npm, Maven, pip, Bundler, or Cargo
- Demonstrated application security experience, such as vulnerability research, secure code review, or writing detection rules
- Fluency with vulnerability classes (OWASP Top 10, CWE) and the software supply chain
- A track record of taking ownership of ambiguous problems and shipping with minimal guidance
- Demonstrated capacity to communicate clearly and concisely about technical problems
Conditions
- Remote, largely asynchronous environment