Principal Security Engineer, Application Security

Who you are

You have extensive experience in application security, with a strong understanding of security principles and practices. You are skilled in identifying and mitigating vulnerabilities throughout the software development lifecycle, ensuring that high-quality software is delivered to customers. Your background includes working closely with engineering teams to integrate security into the development process, fostering a culture of security awareness and best practices.

You are familiar with industry standards and frameworks such as OWASP, and you have a proven track record of implementing security measures that protect applications from threats. You are comfortable using tools and technologies that enhance security, and you stay updated on the latest security trends and vulnerabilities. Your communication skills enable you to effectively convey security concepts to both technical and non-technical stakeholders.

You thrive in a collaborative environment, working alongside cross-functional teams to ensure that security is a shared responsibility. You are proactive in identifying potential security risks and are adept at developing strategies to address them. Your analytical mindset allows you to assess security incidents and respond effectively to mitigate risks.

Desirable

Experience with AI-powered security tools and practices is a plus, as GitLab emphasizes the integration of AI into its workflows. Familiarity with DevSecOps principles and practices will enhance your ability to contribute to the team’s mission of delivering secure software.

What you'll do

In this role, you will lead efforts to enhance the security posture of GitLab's products by collaborating with engineering teams to identify and address security vulnerabilities during the design and development phases. You will conduct security assessments and code reviews, providing guidance on secure coding practices and recommending improvements to existing processes.

You will develop and implement security policies and procedures that align with industry best practices, ensuring compliance with relevant regulations and standards. Your expertise will be crucial in conducting threat modeling sessions and risk assessments, helping teams understand potential security risks and how to mitigate them effectively.

You will also play a key role in incident response, working with teams to investigate security incidents and develop strategies for remediation. Your insights will help shape the security roadmap for GitLab, ensuring that security considerations are integrated into product development from the outset.

What we offer

GitLab offers a flexible remote work environment, allowing you to work from various locations across APAC, EMEA, and North America. You will be part of a high-performance culture that values innovation and collaboration, with opportunities for continuous learning and professional growth. GitLab is committed to fostering an inclusive workplace where every voice is valued, and you will have the chance to co-create the future of software development with industry leaders.

You will have access to resources and tools that support your work, including AI-powered technologies that enhance productivity and efficiency. GitLab encourages you to apply even if your experience doesn't match every requirement, as they value diverse perspectives and backgrounds in their team.