Staff Infrastructure Security Engineer, GitLab
+ Equity Compensation + ESPP
One DevOps platform
Open for applications
One DevOps platform
1001+ employees
Open for applications
+ Equity Compensation + ESPP
1001+ employees
Company mission
To make it so that everyone can contribute. When everyone can contribute, users become contributors and we greatly increase the rate of innovation.
Role
Who you are
- Expert knowledge of security for cloud infrastructure (AWS/GCP/Azure), container orchestration (Kubernetes) and related infrastructure and data security topics
- Proficiency in multiple programming languages (Go, Python, Ruby) with a track record of delivering production-quality security tooling
- Extensive experience with Infrastructure-as-Code security (Terraform, Ansible, CloudFormation), policy-as-code, and automated compliance
- Hands-on experience applying AI to security workflows, with a point of view on where it creates meaningful leverage
- Track record of leading multi-team technical initiatives from ambiguous problem statements to measurable outcomes, setting technical direction that peer teams adopt
- Strong written and verbal communication skills, able to explain security tradeoffs to technical and non-technical audiences, including senior leadership
- Familiarity with security certifications, frameworks, and standards (FedRAMP, ISO 27001, SOC 2, PCI-DSS)
- Share our values, and work in accordance with those values
- Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application
What the job involves
- As a member of the Infrastructure Security Team within the Product Security Department, you will work with teams across GitLab to ensure that the components that comprise our public cloud infrastructure are built from the beginning with resiliency and set security expectations that our customers rely on to power their DevSecOps goals
- As a Staff Security Engineer, you will serve as a technical lead across the topics the Infrastructure Security team owns, including our SaaS Platforms (e.g. GitLab Dedicated, Cells) and Self-Managed offerings
- You will define the technical direction for how the team approaches infrastructure security topics and combine hands-on execution with influence that reaches into partner engineering teams
- You’ll drive business outcomes by ensuring that we pragmatically implement security capabilities into the platform that empowers critical software factories globally
- Set architectural patterns, reference implementations, and foundational security automation that shape how infrastructure security is implemented across GitLab
- Lead infrastructure security initiatives from problem framing through delivery, scoping ambiguous multi-quarter work into executable streams with clear success criteria
- Conduct and lead comprehensive security reviews and threat modeling for complex infrastructure components, identifying systemic risks and driving remediation across affected systems
- Set the team's approach to AI-assisted security engineering, identifying where AI can meaningfully increase leverage and establishing patterns others can adopt
- Serve as an authoritative technical voice for Infrastructure Security across our stakeholders, translating architectural tradeoffs into clear decisions for engineering teams and senior leadership
- Partner on technical planning, prioritization, and roadmap development to align technical work with business objectives
- Mentor and develop engineers, raising the technical bar and modeling inclusive collaboration
- Fulfill the Product Security Division Mission of securing GitLab Infrastructure with our own product ("dogfooding")
Our take
GitLab is an open-source collaboration platform for developers. It enables teams to build code quickly from anywhere without compromising on security or quality. GitLab already has an estimated 30M+ users from all over the world.
According to a 2021 GitLab report, 60% of developers can release code 2x faster with DevOps platforms that bring teams together and accelerate processes. It stands out by catering to programmers of all experiences. Gitlab's version control system helps streamline the process of creating, maintaining, and deploying code, whoever you are.
GitLab was in the right place to capitalise on the recent trend toward rapid digital transformation and remote working. This trend is expected to grow, and with it, GitLab's popularity. With its successful 2021 IPO and the patronage of major brands such as Nasdaq and Jaguar Land Rover, GitLab is expected to solidify its position as the go-to platform for development teams.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
15% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Sep 2019
$268m
SERIES E
Dec 2018
$20m
SERIES D
Total funding: $434.7m
Company benefits
- We offer benefits to manage your health, wealth, and well-being regardless of location
- Flexibility in schedule to be there for life’s important moments
- Equity compensation & Employee Stock Purchase Plan offered
- Generous Paid Time Off
Company HQ
Financial District, San Francisco, CA
Leadership
Sid Sijbrandij
(Co-Founder & Executive Chair)Studied Physics at the University of Twente. Interned at P&G and IBM. Was Lead Architect at the Netherlands' Ministry of Justice from 2009 to 2012. Founded app store Comcoaster in 2008, and then co-founded GitLab in 2012.
Share this job
View 75 more jobs at GitLab