Intermediate Application Security Engineer, GitLab
AMER/EMEA
$103.6-222k
California/Colorado/Hawaii/New Jersey/New York/Washington/DC pay range only. Plus Equity Compensation and Employee Stock Purchase Plan
One DevOps platform
Open for applications
One DevOps platform
1001+ employees
Open for applications
$103.6-222k
California/Colorado/Hawaii/New Jersey/New York/Washington/DC pay range only. Plus Equity Compensation and Employee Stock Purchase Plan
1001+ employees
Company mission
To make it so that everyone can contribute. When everyone can contribute, users become contributors and we greatly increase the rate of innovation.
Role
Who you are
- Strong understanding of fundamental security principles
- Excellent written and verbal communication skills, with an ability to articulate complex topics in a clear and concise manner
- Ability to effectively collaborate with software development teams
- Solid understanding of common security vulnerabilities, including how to identify, exploit, and ways to remediate them
- Proficiency in reading, writing, and reviewing code in Ruby on Rails or Go
- Familiarity with common security libraries and tools (e.g. static analysis tools, proxying / penetration testing tools)
- A basic understanding of network and web related protocols (e.g. TCP/IP, UDP, HTTP, HTTPS, protocols)
- Comfortable with using Git and GitLab
What the job involves
- The Application Security team plays a vital role at GitLab by ensuring that all its products are created securely throughout all stages of the DevSecOps lifecycle
- In this role, you will work closely with Engineering, Product teams, and third-party partners to enhance the security of GitLab and its products to safeguard customer data
- You'll be responsible for identifying and triaging application security vulnerabilities, collaborating with teams to address them, and integrating core security principles throughout the entire DevSecOps lifecycle
- Collaborate closely with product and development teams in reproducing, triaging, and addressing application security vulnerabilities
- Effectively communicate risks to ensure clear understanding and prioritization of security issues
- Conduct security-focused code reviews, threat modeling, and application security assessments
- Support the bug bounty program by updating policies, triaging submissions, and effectively engaging with our reporters
- Provide security training and outreach to internal development teams
- Lead both critical and regular security patch releases
- Ensure security is integrated across each stage of the software development lifecycle
- Assist in development of security processes and automated tooling that prevent classes of security issues
- Assist in maturing the team's internal processes, workflows, and automation
Our take
GitLab is an open-source collaboration platform for developers. It enables teams to build code quickly from anywhere without compromising on security or quality. GitLab already has an estimated 30M+ users from all over the world.
According to a 2021 GitLab report, 60% of developers can release code 2x faster with DevOps platforms that bring teams together and accelerate processes. It stands out by catering to programmers of all experiences. Gitlab's version control system helps streamline the process of creating, maintaining, and deploying code, whoever you are.
GitLab was in the right place to capitalize on the recent trend toward rapid digital transformation and remote working. This trend is expected to continue to grow, and with it, GitLab's popularity. With its successful 2021 IPO and the patronage of major brands such as Nasdaq and Jaguar Land Rover, GitLab is expected to solidify its position as the go-to platform for development teams.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Some candidates hear
back within 2 weeks
15% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Sep 2019
$268m
SERIES E
Dec 2018
$20m
SERIES D
Total funding: $432.8m
Company benefits
- We offer benefits to manage your health, wealth, and well-being regardless of location
- Flexibility in schedule to be there for life’s important moments
- Equity compensation & Employee Stock Purchase Plan offered
- Generous Paid Time Off
Company values
- Collaboration - We prioritize things that help us work together effectively, such as assuming positive intent, saying “thanks” and “sorry,” and giving timely feedback.
- Results - We operate with a sense of urgency and bias for action, and we do what we promise — to each other, customers, users, and investors.
- Efficiency - From choosing boring solutions to documenting everything and being managers of one, we strive to make fast progress on the right things.
- Diversity, Inclusion, & Belonging - We work to ensure GitLab is a place where people from every background and circumstance feel like they belong and can thrive.
- Iteration - We aim to do the smallest viable and valuable thing, and get it out quickly for feedback.
- Transparency - Everything we do is public by default, from our company handbook to the issue trackers for our product.
Company HQ
Financial District, San Francisco, CA
Articles
Leadership
Sid Sijbrandij
(CEO)Studied Physics at the University of Twente. Interned at P&G and IBM. Was Lead Architect at the Netherlands' Ministry of Justice from 2009 to 2012. Founded app store Comcoaster in 2008, and then co-founded GitLab in 2012.
Diversity, Equity & Inclusion at GitLab
- Diversity, Inclusion, & Belonging is woven into our values and everything we do
- GitLab is home to many dedicated Team Member Resource Groups
- GitLab is a global, multi-cultural organization with team members all over the world
Share this job
View 45 more jobs at GitLab