Staff Product Security Architect, GitLab
$168-238k
+ equity and ESPP
One DevOps platform
Be an early applicant
One DevOps platform
1001+ employees
Be an early applicant
$168-238k
+ equity and ESPP
1001+ employees
Company mission
To make it so that everyone can contribute. When everyone can contribute, users become contributors and we greatly increase the rate of innovation.
Role
Who you are
- Depth in application security architecture, including authentication and authorization models, privilege escalation, multi-tenant isolation, and trust boundary analysis
- Experience securing distributed systems, including service-to-service authentication, secrets handling, and the failure modes of security decisions made across process boundaries
- Working knowledge of software supply chain security: build and release integrity, artifact provenance, and dependency risk
- A track record of proactive architecture work — identifying risk before it becomes an incident, and designing something that prevents a class of problem rather than an instance of one
- Demonstrated ability to build trusted relationships with engineering leadership and influence technical direction through expertise rather than gatekeeping
- Experience defining security standards or patterns that teams adopted without being compelled to
- The ability to operate strategically while remaining hands-on, including reading unfamiliar code, building prototypes, and contributing changes
- Clear written communication, and the ability to make a security argument to an engineering audience that does not already agree with it
- A view on how security guidance should be authored and delivered for AI coding tools, not only for humans
- If you're excited about this role, please apply and allow our recruiters to assess your application
What the job involves
- We are hiring a Staff Product Security Architect to join our Security Platforms and Architecture organization at GitLab
- Rather than operating as a purely consultative body, Security Architecture at GitLab functions as a hands-on technical driver
- Our mission is to embed proactive guidance directly into modern developer workflows and automated coding environments, embedding security standards into the software development process from the outset
- We strive to enable teams to deliver secure, resilient software seamlessly while minimizing reliance on manual security gates
- In this role, you will collaborate closely with product engineering organizations, spearhead architectural strategy for critical capabilities, and serve as the primary Security Owner driving risk reduction for key entries within our risk management framework
- Your daily work will span architectural design reviews, technical prototyping, and establishing scalable patterns that enable engineering teams to execute autonomously
- Partner with engineering and product leadership across GitLab, developing enough context in their domains to anticipate security problems rather than react to them
- Lead security architecture and design work for strategic initiatives, and provide direction to the cross-functional teams delivering them
- Identify, assess, and prioritise systemic security risks, and act as Security Owner for high-priority items in the Product Security Risk Register, co-executing remediation with the teams who own the code
- Codify recurring security decisions into reusable artifacts — guardrails, standards, design patterns,skills, and reference threat models — delivered into developer and AI coding tool workflows
- Build proofs of concept and prototypes to unblock engineering teams and shorten the distance between a security requirement and a working implementation
- Conduct security architecture reviews for large or strategic projects, and coordinate with Application Security so that review coverage is comprehensive and correctly prioritised
- Threat model new and existing systems, and establish the patterns that let teams threat model their own work
- Work with Security Research on proactive exploration of unknown risks in GitLab's architecture
- Anticipate emerging security challenges and propose architectural responses before they reach implementation
- Mentor security engineers across the division, and represent security architecture to engineering audiences
Our take
GitLab is an open-source collaboration platform for developers. It enables teams to build code quickly from anywhere without compromising on security or quality. GitLab already has an estimated 30M+ users from all over the world.
According to a 2021 GitLab report, 60% of developers can release code 2x faster with DevOps platforms that bring teams together and accelerate processes. It stands out by catering to programmers of all experiences. Gitlab's version control system helps streamline the process of creating, maintaining, and deploying code, whoever you are.
GitLab was in the right place to capitalise on the recent trend toward rapid digital transformation and remote working. This trend is expected to grow, and with it, GitLab's popularity. With its successful 2021 IPO and the patronage of major brands such as Nasdaq and Jaguar Land Rover, GitLab is expected to solidify its position as the go-to platform for development teams.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
15% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Sep 2019
$268m
SERIES E
Dec 2018
$20m
SERIES D
Total funding: $434.1m
Company benefits
- We offer benefits to manage your health, wealth, and well-being regardless of location
- Flexibility in schedule to be there for life’s important moments
- Equity compensation & Employee Stock Purchase Plan offered
- Generous Paid Time Off
Company HQ
Financial District, San Francisco, CA
Leadership
Sid Sijbrandij
(Co-Founder & Executive Chair)Studied Physics at the University of Twente. Interned at P&G and IBM. Was Lead Architect at the Netherlands' Ministry of Justice from 2009 to 2012. Founded app store Comcoaster in 2008, and then co-founded GitLab in 2012.
Share this job
View 110 more jobs at GitLab