Intermediate Application Security Engineer, GitLab

AMER/EMEA

$103.6-222k

California/Colorado/Hawaii/New Jersey/New York/Washington/DC pay range only. Plus Equity Compensation and Employee Stock Purchase Plan

Ruby

Git

Rails

Ruby on Rails

Junior, Mid and Senior level

Remote from Canada, US

One DevOps platform

Job no longer available

One DevOps platform

1001+ employees

B2BSaaSDevOps

Job no longer available

$103.6-222k

California/Colorado/Hawaii/New Jersey/New York/Washington/DC pay range only. Plus Equity Compensation and Employee Stock Purchase Plan

Ruby

Git

Rails

Ruby on Rails

Junior, Mid and Senior level

Remote from Canada, US

1001+ employees

B2BSaaSDevOps

Company mission

To make it so that everyone can contribute. When everyone can contribute, users become contributors and we greatly increase the rate of innovation.

Job

Company

Role

Who you are

Strong understanding of fundamental security principles
Excellent written and verbal communication skills, with an ability to articulate complex topics in a clear and concise manner
Ability to effectively collaborate with software development teams
Solid understanding of common security vulnerabilities, including how to identify, exploit, and ways to remediate them
Proficiency in reading, writing, and reviewing code in Ruby on Rails or Go
Familiarity with common security libraries and tools (e.g. static analysis tools, proxying / penetration testing tools)
A basic understanding of network and web related protocols (e.g. TCP/IP, UDP, HTTP, HTTPS, protocols)
Comfortable with using Git and GitLab

What the job involves

The Application Security team plays a vital role at GitLab by ensuring that all its products are created securely throughout all stages of the DevSecOps lifecycle
In this role, you will work closely with Engineering, Product teams, and third-party partners to enhance the security of GitLab and its products to safeguard customer data
You'll be responsible for identifying and triaging application security vulnerabilities, collaborating with teams to address them, and integrating core security principles throughout the entire DevSecOps lifecycle
Collaborate closely with product and development teams in reproducing, triaging, and addressing application security vulnerabilities
Effectively communicate risks to ensure clear understanding and prioritization of security issues
Conduct security-focused code reviews, threat modeling, and application security assessments
Support the bug bounty program by updating policies, triaging submissions, and effectively engaging with our reporters
Provide security training and outreach to internal development teams
Lead both critical and regular security patch releases
Ensure security is integrated across each stage of the software development lifecycle
Assist in development of security processes and automated tooling that prevent classes of security issues
Assist in maturing the team's internal processes, workflows, and automation

Our take

GitLab is an open-source collaboration platform for developers. It enables teams to build code quickly from anywhere without compromising on security or quality. GitLab already has an estimated 30M+ users from all over the world.

According to a 2021 GitLab report, 60% of developers can release code 2x faster with DevOps platforms that bring teams together and accelerate processes. It stands out by catering to programmers of all experiences. Gitlab's version control system helps streamline the process of creating, maintaining, and deploying code, whoever you are.

GitLab was in the right place to capitalise on the recent trend toward rapid digital transformation and remote working. This trend is expected to grow, and with it, GitLab's popularity. With its successful 2021 IPO and the patronage of major brands such as Nasdaq and Jaguar Land Rover, GitLab is expected to solidify its position as the go-to platform for development teams.

Kirsty

Company Specialist at Welcome to the Jungle

Insights

Top investors

15% employee growth in 12 months

Glassdoor (3.9)

Trustpilot (1.5)

Company

Funding (last 2 of 8 rounds)

Sep 2019

$268m

SERIES E

Dec 2018

$20m

SERIES D

Total funding: $435m

Company benefits

We offer benefits to manage your health, wealth, and well-being regardless of location
Flexibility in schedule to be there for life’s important moments
Equity compensation & Employee Stock Purchase Plan offered
Generous Paid Time Off

Company HQ

Financial District, San Francisco, CA

Leadership

Sid Sijbrandij

(CEO)

Studied Physics at the University of Twente. Interned at P&G and IBM. Was Lead Architect at the Netherlands' Ministry of Justice from 2009 to 2012. Founded app store Comcoaster in 2008, and then co-founded GitLab in 2012.

Share this job

View 83 more jobs at GitLab