חזרה

Principal Security Researcher

GitLab
203.2–275 אלף $ לשנהRemote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States, מרחוקפרינסיפלמשרה מלאה
משרה חיצונית, ההגשה באתר החברהאושר שהמשרה פתוחה לפני 12 שעות

You will conduct security research and penetration testing across GitLab’s DevSecOps platform, with a focus on AI and agentic capabilities. Your findings will guide security improvements, remediation work, and the practices engineering teams use to build secure products.

מה תעשו

  • Conduct and lead security research projects across multiple functional areas.
  • Identify and validate novel, systemic, and chained vulnerabilities, including through proof-of-concept exploits.
  • Assess emerging vulnerability classes and drive remediation of the class across the codebase.
  • Lead security research into GitLab’s AI and agentic surfaces and define security requirements for engineering teams.
  • Build tooling and automation to scale security research, including agent-assisted vulnerability discovery.
  • Mentor colleagues and integrate research findings into engineering and business functions.

דרישות

  • 10+ years of experience in security research, penetration testing, or offensive security roles.
  • Strong ability to discover and exploit vulnerabilities in large codebases and complex systems.
  • Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust.
  • Strong knowledge of AI frameworks and AI attack vectors, including prompt injection, agent manipulation, and workflow exploitation.
  • Excellent written communication skills and ability to translate technical findings into risk assessments and remediation recommendations.

יתרון

  • Published security research or conference presentations.
  • Background in software engineering with distributed systems expertise.
  • Experience with GitLab or similar DevSecOps platforms.

תנאי סף

  • 10+ years of experience in security research, penetration testing, or offensive security roles
  • Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust

הטבות

  • Benefits to support your health, finances, and well-being
  • Flexible Paid Time Off
  • Team Member Resource Groups
  • Equity Compensation & Employee Stock Purchase Plan
  • Growth and Development Fund
  • Parental Leave
Security ResearchPenetration TestingRubyGoPythonTypeScriptRustAI Security