Senior Security Engineer, GitLab
Security Incident Response Team (SIRT), EMEA
+ Equity Compensation + Employee Stock Purchase Plan
One DevOps platform
Be an early applicant
One DevOps platform
1001+ employees
Be an early applicant
+ Equity Compensation + Employee Stock Purchase Plan
1001+ employees
Company mission
To make it so that everyone can contribute. When everyone can contribute, users become contributors and we greatly increase the rate of innovation.
Role
Who you are
- This role is ideal for someone who thrives in high-tempo environments, brings strong DFIR expertise, and is equally passionate about operational excellence and building scalable detection and response systems and workflows
- Strong experience in security incident response and investigations in cloud-first environments
- Experience using or administering Git/GitLab in a security or engineering context
- Hands-on experience with SIEM, EDR, and/or detection engineering
- Experience with cloud platforms (AWS & GCP)
- Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)
- Experience building or working with automation (e.g., Python, scripting, SOAR platforms)
- Interest or experience in applying AI/ML or data-driven techniques to detection, triage, or response workflows
- Strong analytical and problem-solving skills; ability to operate effectively during high-severity incidents
- Excellent written communication skills with a passion for clear, actionable documentation
- Growth mindset with a proactive approach to identifying and mitigating security risks
- Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application
What the job involves
- As a Senior Security Engineer on GitLab’s Security Incident Response Team (SIRT), you will play a critical role in defending GitLab.com and the broader GitLab environment against evolving security threats
- You will lead high-impact incidents and investigations, drive continuous improvements in defense, detection and response capabilities, and help scale security operations through automation and intelligent workflows
- Operating within a 24/7 global environment (follow the sun model), you will own incidents end-to-end - from detection and triage through containment, eradication, and recovery - while partnering cross-functionally to strengthen GitLab’s overall security posture
- A key aspect of this role is leveraging automation and AI-driven approaches to improve detection fidelity, accelerate investigations, and reduce response times. You will help shape how modern tooling and data are applied to stay ahead of evolving adversary tactics
- Lead and coordinate end-to-end incident response for high-severity security events within a 24/7 global on-call model, with this role operating during EMEA business hours
- Prepare clear executive communications that keep stakeholders informed during incidents
- Investigate complex security incidents across cloud environments, applying strong Digital Forensics and Incident Response (DFIR) methodologies
- Partnering with Signals Engineering to design and implement detection capabilities, including SIEM use cases, alerting strategies, and telemetry pipelines
- Build and enhance automation and AI-assisted workflows to improve triage, investigation speed, and response consistency
- Partner with Threat Intelligence to contextualize threats and improve detection coverage
- Conduct root cause analysis (RCA) and lead post-incident reviews to drive continuous improvement and risk reduction
- Develop and maintain runbooks, playbooks, and operational documentation
- Collaborate cross-functionally (Engineering, Infrastructure, Legal, Product, Communications, etc) during incidents and lead proactive initiatives (e.g. tabletops)
- Mentor other engineers and help elevate the team’s overall incident response maturity
Our take
GitLab is an open-source collaboration platform for developers. It enables teams to build code quickly from anywhere without compromising on security or quality. GitLab already has an estimated 30M+ users from all over the world.
According to a 2021 GitLab report, 60% of developers can release code 2x faster with DevOps platforms that bring teams together and accelerate processes. It stands out by catering to programmers of all experiences. Gitlab's version control system helps streamline the process of creating, maintaining, and deploying code, whoever you are.
GitLab was in the right place to capitalise on the recent trend toward rapid digital transformation and remote working. This trend is expected to grow, and with it, GitLab's popularity. With its successful 2021 IPO and the patronage of major brands such as Nasdaq and Jaguar Land Rover, GitLab is expected to solidify its position as the go-to platform for development teams.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
15% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Sep 2019
$268m
SERIES E
Dec 2018
$20m
SERIES D
Total funding: $434.6m
Company benefits
- We offer benefits to manage your health, wealth, and well-being regardless of location
- Flexibility in schedule to be there for life’s important moments
- Equity compensation & Employee Stock Purchase Plan offered
- Generous Paid Time Off
Company HQ
Financial District, San Francisco, CA
Leadership
Sid Sijbrandij
(Co-Founder & Executive Chair)Studied Physics at the University of Twente. Interned at P&G and IBM. Was Lead Architect at the Netherlands' Ministry of Justice from 2009 to 2012. Founded app store Comcoaster in 2008, and then co-founded GitLab in 2012.
Share this job
View 90 more jobs at GitLab