The opportunity
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation.
What you'll do
Partner with engineering and product leadership across GitLab, developing: enough context in their domains to anticipate security problems rather than react to them
Lead security architecture and design work for strategic initiatives, and: provide direction to the cross-functional teams delivering them
Identify, assess, and prioritise systemic security risks, and act as Security: Owner for high-priority items in the Product Security Risk Register, co-executing remediation with the teams who own the code
Codify recurring security decisions into reusable artifacts: guardrails, standards, design patterns,skills, and reference threat models — delivered into developer and AI coding tool workflows
Build proofs of concept and prototypes to unblock engineering teams and: shorten the distance between a security requirement and a working implementation
Conduct security architecture reviews for large or strategic projects, and: coordinate with Application Security so that review coverage is comprehensive and correctly prioritised
What they're looking for
- Threat model new and existing systems, and establish the patterns that let teams threat model their own work
- Work with Security Research on proactive exploration of unknown risks in GitLab's architecture
- Anticipate emerging security challenges and propose architectural responses before they reach implementation
- Mentor security engineers across the division, and represent security architecture to engineering audiences