Intermediate Vulnerability Research Engineer, GitLab

Application Security Testing: Vulnerability Research

$98-210k

Salary is applicable to California/Colorado/Hawaii/New Jersey/New York/Washington/DC candidates only + Equity

Mid and Senior level

Remote from US

One DevOps platform

Job no longer available

One DevOps platform

1001+ employees

B2BSaaSDevOps

Job no longer available

$98-210k

Salary is applicable to California/Colorado/Hawaii/New Jersey/New York/Washington/DC candidates only + Equity

Mid and Senior level

Remote from US

1001+ employees

B2BSaaSDevOps

Company mission

To make it so that everyone can contribute. When everyone can contribute, users become contributors and we greatly increase the rate of innovation.

Job

Company

Role

Who you are

3+ years of direct experience in developing and improving vulnerability detection products in the context of web security
Knowledge of the vulnerability management process
Knowledge of software composition analysis (SCA) and software supply chain ecosystems
Experience with source code analysis, static application security testing (SAST), and dynamic application security testing (DAST) along with benchmarking experience testing the efficacy of these products
Knowledge about compilers, compiler design and construction
Experience developing automated web security testing/analysis tools
Experience in product development
You have a passion for security and open source, and enjoy collaborating with cross-functional teams

What the job involves

You'll be at the forefront of our R&D efforts within our Engineering department in this role
You’ll be expected to focus on improving GitLab’s security detection capabilities in our Application Security Testing stage groups
This includes SAST, DAST, Secret Detection and Composition Analysis, and future products
Vulnerability Research Engineers perform research to analyze software vulnerabilities, exploitation methods, track new vectors, discover novel methods and approaches in software security, and apply this knowledge to the security products and GitLab itself
Carry out research and come up with proofs of concepts that affect the security products and GitLab, including SAST, DAST, Secret Detection and Composition Analysis
Curate advisory databases for dependency scanning. This is a semi-automatic task that includes auditing/reviewing, editing existing and adding new advisories to the database while, at the same time, trying to automate repetitive tasks away as much as possible
Build/develop benchmarks to test the efficacy of scanning and detection products to constantly improve quality of results
Measure and Improve the efficacy of scanning and detection products over time
Write detailed technical reports
Assess security product output results and conduct root cause analysis to improve efficacy
Respond to internal and external customer inquiries on vulnerabilities and related topics

Our take

GitLab is an open-source collaboration platform for developers. It enables teams to build code quickly from anywhere without compromising on security or quality. GitLab already has an estimated 30M+ users from all over the world.

According to a 2021 GitLab report, 60% of developers can release code 2x faster with DevOps platforms that bring teams together and accelerate processes. It stands out by catering to programmers of all experiences. Gitlab's version control system helps streamline the process of creating, maintaining, and deploying code, whoever you are.

GitLab was in the right place to capitalize on the recent trend toward rapid digital transformation and remote working. This trend is expected to continue to grow, and with it, GitLab's popularity. With its successful 2021 IPO and the patronage of major brands such as Nasdaq and Jaguar Land Rover, GitLab is expected to solidify its position as the go-to platform for development teams.

Kirsty

Company Specialist at Welcome to the Jungle

Insights

Top investors

15% employee growth in 12 months

Glassdoor (4)

Trustpilot (1.9)

Company

Funding (last 2 of 8 rounds)

Sep 2019

$268m

SERIES E

Dec 2018

$20m

SERIES D

Total funding: $434.1m

Company benefits

We offer benefits to manage your health, wealth, and well-being regardless of location
Flexibility in schedule to be there for life’s important moments
Equity compensation & Employee Stock Purchase Plan offered
Generous Paid Time Off

Company HQ

Financial District, San Francisco, CA

Leadership

Sid Sijbrandij

(CEO)

Studied Physics at the University of Twente. Interned at P&G and IBM. Was Lead Architect at the Netherlands' Ministry of Justice from 2009 to 2012. Founded app store Comcoaster in 2008, and then co-founded GitLab in 2012.

Share this job

View 92 more jobs at GitLab