Principal Security Researcher at GitLab

Requirements

10+ years of experience in security research, penetration testing, or offensive security roles
Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems
Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust
Ability to read and analyze code across multiple languages and codebases
Strong knowledge of AI frameworks
Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation
At ease in establishing and driving complex remediation initiatives involving cross-functional teams
Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner
Ability to translate complex technical findings into clear risk assessments and remediation recommendations
Strong analytical and problem-solving skills with creative thinking about attack scenarios

Conduct and lead security research projects across multiple functional areas
Identify novel, systemic, and chained vulnerabilities in GitLab
Validate security vulnerabilities through hands-on testing
Assess emerging industry vulnerability classes against the GitLab codebase
Lead security research into GitLab's AI and agentic surfaces
Build and direct the tooling and automation for security research
Research the security posture of open source tools and dependencies integrated with GitLab
Teach, mentor, and advise other domain experts and individual contributors
Share knowledge and novel vulnerability types with the security community