Intermediate Full Stack Engineer, GitLab

• 3+ years of fullstack development experience
• Strong proficiency in Ruby on Rails and JavaScript frontend frameworks
• Excellent problem-solving and debugging skills
• Strong communication skills and ability to explain complex security concepts

Desirable

• As an Intermediate Fullstack Engineer on the Pipeline Security team, you'll be at the forefront of making CI pipelines more secure and trustworthy for GitLab users worldwide
• You'll work on critical security features that directly impact how thousands of organizations handle sensitive information in their development workflows
• Our team is currently focused on two major initiatives: developing GitLab's native secrets management system for CI pipelines and implementing SLSA L3 compliance features to enhance software supply chain security
• Working with both Ruby on Rails and Vue.js, you'll help shape the security architecture of GitLab's CI/CD infrastructure
• This role offers a unique opportunity to combine deep backend development expertise with security engineering, directly contributing to making GitLab's pipelines more secure for everyone
• Security Implementation: Contribute to the development of GitLab's native secrets management system for CI pipelines, ensuring secure handling of sensitive information
• Code Review: Review code contributions with a security-first mindset, ensuring all new features meet our high security standards
• Secure Development: Write secure, maintainable code primarily in Ruby on Rails and Vue.js
• Technical Collaboration: Apply security best practices and participate in code reviews with a security-focused mindset
• Cross-team Collaboration: Work closely with security experts and other engineering teams to ensure best practices in secure software development
• Documentation: Write and maintain technical documentation for security features, focusing on both implementation details and security considerations
• Problem Solving: Debug and resolve complex security-related issues in production environments
• Security Architecture: Participate in design discussions and technical reviews with a focus on security implications
• The Pipeline Security team is responsible for making CI pipelines more secure and trustworthy for users
• E're currently focused on two major initiatives that will significantly improve GitLab's security posture: developing a native secrets management system and implementing SLSA L3 compliance features