Senior Backend Engineer, Software Supply Chain Security: Pipeline Security

Requirements

• 5+ years of backend development experience
• Strong proficiency in Ruby on Rails and its security features
• Deep understanding of CI/CD concepts and pipeline security
• Experience with secrets management and security best practices (Experience with HashiCorp Vault or similar systems preferred)
• Strong knowledge of web application security principles
• Experience with Git and GitLab/GitHub workflows
• Strong communication skills and ability to explain complex security concepts

What You'll Be Doing

• Technical Architecture: Design and implement security-focused features for GitLab's CI/CD pipeline infrastructure
• Security Implementation: Contribute to the development of GitLab's native secrets management system
• Code Review: Review code contributions with a security-first mindset
• Secure Development: Write secure, maintainable code in Ruby on Rails and Golang
• Technical Collaboration: Apply security best practices and participate in code reviews
• Cross-team Collaboration: Work closely with security experts and other engineering teams
• Documentation: Write and maintain technical documentation for security features
• Problem Solving: Debug and resolve complex security-related issues
• Security Architecture: Participate in design discussions and technical reviews

Nice to Haves

• Experience with Golang development preferred
• Experience with container security and Docker preferred
• Familiarity with SLSA framework and software supply chain security preferred

Perks and Benefits

• Benefits to support your health, finances, and well-being
• All remote, asynchronous work environment
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental leave
• Home office support