Software Engineering Manager, GitLab
Application Security Testing: Composition Analysis & Dynamic Analysis
$131.6-282k
+ Equity Compensation & Employee Stock Purchase Plan. Salary range is benchmarked on US rates and may vary in other locations
One DevOps platform
Open for applications
One DevOps platform
1001+ employees
Open for applications
$131.6-282k
+ Equity Compensation & Employee Stock Purchase Plan. Salary range is benchmarked on US rates and may vary in other locations
1001+ employees
Company mission
To make it so that everyone can contribute. When everyone can contribute, users become contributors and we greatly increase the rate of innovation.
Role
Who you are
- Background leading multiple technical teams or groups, ideally in application security or related domains
- Practical understanding of software composition analysis, including how to assess and manage risks in application dependencies
- Knowledge of dynamic application security testing (DAST), API security, and web application security testing techniques and tools
- Familiarity with containerization technologies, package managers, and dependency management systems
- Experience working with or around open source security tooling (for example, OWASP ZAP, Trivy, or similar tools)
- Ability to plan and run agile project management processes across several teams, including coordinating priorities and dependencies
- Skill in guiding product and architecture decisions for security scanning tools, balancing technical constraints with customer needs
- Openness to candidates with transferable experience in security engineering, DevSecOps, or vulnerability management who are motivated to grow in application security leadership
What the job involves
- As an Engineering Manager for Composition Analysis and Dynamic Analysis, you’ll lead multiple teams building the application security scanning capabilities that help GitLab customers find and fix vulnerabilities in their software supply chain and web applications
- You’ll guide engineers working on software composition analysis, container scanning, API security, dynamic application security testing, and fuzz testing, and you’ll be responsible for setting priorities, shaping product architecture, and running agile processes across these groups so that our security offerings stay effective, reliable, and easy to use in real DevSecOps environments
- You’ll balance complex, security-focused roadmaps, author project plans that span both groups, and coordinate their work so that customers get a cohesive, end-to-end application security experience within GitLab
- In your first year, you’ll drive key initiatives like auto-remediation of vulnerable packages, scanning unmanaged C/C++ dependencies, static reachability analysis at the function level, snippet detection for open source dependencies, and significant improvements to the DAST crawler’s efficiency and stability
- Lead engineers across the Composition Analysis and Dynamic Analysis groups, setting clear priorities and expectations
- Drive key security initiatives, including auto-remediation of vulnerable software packages, scanning unmanaged C/C++ dependencies, static reachability analysis, and snippet detection for open source dependencies
- Improve Dynamic Analysis Security Testing (DAST) capabilities by enhancing the crawler for efficiency, stability, and consistent web application traversal
- Balance priorities and resources across multiple security-focused engineering teams to ensure sustainable delivery and high-quality outcomes
- Author and maintain project plans for epics spanning both groups, aligning work, identifying dependencies, and avoiding duplication of effort
- Run agile project management processes for multiple teams, including planning, estimation, and continuous improvement of delivery practices
- Provide guidance on the architecture of security products, ensuring that software composition analysis and dynamic analysis solutions are robust and scalable
- Collaborate closely with Composition Analysis and Dynamic Analysis teams to ensure consistent, complementary approaches to application security across GitLab’s platform
- Some examples of our projects:
- Designing auto-remediation workflows for vulnerable open source and third-party dependencies
- Improving the DAST crawler to provide more consistent and reliable coverage of modern web applications
Our take
GitLab is an open-source collaboration platform for developers. It enables teams to build code quickly from anywhere without compromising on security or quality. GitLab already has an estimated 30M+ users from all over the world.
According to a 2021 GitLab report, 60% of developers can release code 2x faster with DevOps platforms that bring teams together and accelerate processes. It stands out by catering to programmers of all experiences. Gitlab's version control system helps streamline the process of creating, maintaining, and deploying code, whoever you are.
GitLab was in the right place to capitalise on the recent trend toward rapid digital transformation and remote working. This trend is expected to grow, and with it, GitLab's popularity. With its successful 2021 IPO and the patronage of major brands such as Nasdaq and Jaguar Land Rover, GitLab is expected to solidify its position as the go-to platform for development teams.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
15% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Sep 2019
$268m
SERIES E
Dec 2018
$20m
SERIES D
Total funding: $435.2m
Company benefits
- We offer benefits to manage your health, wealth, and well-being regardless of location
- Flexibility in schedule to be there for life’s important moments
- Equity compensation & Employee Stock Purchase Plan offered
- Generous Paid Time Off
Company HQ
Financial District, San Francisco, CA
Leadership
Sid Sijbrandij
(CEO)Studied Physics at the University of Twente. Interned at P&G and IBM. Was Lead Architect at the Netherlands' Ministry of Justice from 2009 to 2012. Founded app store Comcoaster in 2008, and then co-founded GitLab in 2012.
Share this job
View 95 more jobs at GitLab