Requirements

• 10+ years of experience in security research, penetration testing, or offensive security roles
• Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems
• Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust
• Ability to read and analyze code across multiple languages and codebases
• Strong knowledge of AI frameworks
• Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation
• At ease in establishing and driving complex remediation initiatives involving cross-functional teams
• Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner
• Ability to translate complex technical findings into clear risk assessments and remediation recommendations
• Strong analytical and problem-solving skills with creative thinking about attack scenarios

Nice to Have

• Published security research or conference presentations
• Background in software engineering with distributed systems expertise
• Experience with GitLab or similar DevSecOps platforms

What you'll be doing

• Conduct and lead security research projects across multiple functional areas
• Identify novel, systemic, and chained vulnerabilities in GitLab
• Validate security vulnerabilities through hands-on testing
• Assess emerging industry vulnerability classes against the GitLab codebase
• Lead security research into GitLab's AI and agentic surfaces
• Build and direct the tooling and automation for security research
• Research the security posture of open source tools and dependencies integrated with GitLab
• Teach, mentor, and advise other domain experts and individual contributors
• Share knowledge and novel vulnerability types with the security community

Perks and Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave