Intermediate Backend Engineer, Security Risk Management: Security Policies (Ruby)

Requirements

• Proven expertise in Ruby on Rails development (2-4 years experience)
• Proficiency in SQL databases, particularly PostgreSQL
• Strong understanding of software testing methodologies and test-driven development practices
• API development and integration experience with complex systems
• Ability to understand and work with large, interconnected codebases and abstract complex problems
• Experience taking projects from concept to production independently
• Effective communication skills and ability to collaborate across multiple teams and time zones
• Security domain knowledge (OWASP, CVE/CWE, vulnerability lifecycle) is highly valued

What You'll Be Doing

• Lead the architectural transformation of policy storage from YAML files to first-class GitLab entities
• Design and implement security policy features that enforce behaviors across thousands of projects efficiently
• Serve as DRI for features, taking them from initial planning through successful release with post-coverage
• Connect and integrate features across GitLab's platform, working with teams from Verify to Code Review
• Champion comprehensive testing and code quality improvements to ensure reliability at scale
• Collaborate with Sec Section teams and cross-functional partners to deliver seamless security automation
• Optimize performance and security in high-scale distributed systems
• Provide technical leadership by independently solving complex requirements with minimal guidance
• Contribute to on-call rotations, ensuring the stability and security of GitLab operations

Nice to Haves

• Experience collaborating with AI tools is a plus
• GitLab platform and CI/CD experience preferred
• Highly organized, self-starter with strong self-management skills

Perks and Benefits

• Benefits to support your health, finances, and well-being
• All remote, asynchronous work environment
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and development budget
• Parental leave
• Home office support