Jobs at GitLab

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Build, test, ship, and operate production backend features using Ruby/Rails, Go, or other modern languages. Design APIs, background jobs, integrations, data models, migrations, and services while ensuring security, performance, reliability, and observability. Review code, investigate failures, reduce technical debt, provide operational support, collaborate asynchronously with product and engineering teams, and use AI coding tools responsibly.

Provides technical leadership across teams by designing and delivering large-scale backend initiatives, modernizing monolithic systems, defining architecture and engineering standards, and improving reliability, security, observability, and operability. The role establishes Go and Kubernetes patterns, guides Rust adoption, participates in incident response, mentors engineers, influences platform roadmaps, and leads safe adoption of AI-assisted and agentic engineering workflows.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Design, build, and maintain secure, tested, performant backend integrations connecting GitLab agents with tools such as Slack, Claude Code, and Codex. Own complex features, develop GraphQL and REST APIs, improve automated testing, troubleshoot production issues through on-call rotations, enhance observability and resiliency, and collaborate across product, frontend, backend, and AI engineering teams.

Lead end-to-end incident response for high-severity security events across cloud environments, perform DFIR investigations, build detection and automation (including AI-assisted) workflows, partner cross-functionally, produce executive communications and RCAs, maintain runbooks/playbooks, and mentor other engineers within a 24/7 global on-call model.

Lead cross-functional Developer Experience initiatives across six teams, contributing hands-on backend code in Ruby and Go. Improve testing reliability, test coverage, CI/CD pipelines, logging standards, and development environments. Partner with engineering, platform, product, and infrastructure teams to identify friction, remove systemic bottlenecks, shape the Developer Experience Platform strategy, and foster continuous engineering improvement.

Provides senior employment-law advice across the EMEA employment lifecycle, including agreements, policies, compliance, privacy, works councils, disputes, litigation, investigations, and organizational changes. Advises People teams and business leaders, coordinates local and outside counsel, monitors legal developments, builds scalable legal processes and playbooks, and mentors colleagues in a remote, globally distributed organization.

Drive partner-sourced Scale pipeline across EMEA by recruiting, enabling, and activating partners (distributors, resellers, hyperscalers). Build repeatable partner-led campaigns, account mapping, event strategies, and partner portals. Collaborate with account executives, field marketing, and regional leaders to forecast, report, and accelerate marketplace transactions to meet regional Scale growth targets.

As a Staff Backend Engineer at GitLab, you'll enhance backend infrastructure for CI, integrate AI features, and ensure reliability and performance in CI/CD workflows.

The Staff Infrastructure Security Engineer will lead security initiatives, set architectural patterns, conduct security reviews, and mentor engineers while ensuring security in cloud infrastructures for GitLab.

The Business Development Representative is responsible for generating qualified leads and pipeline through prospecting and outreach, collaborating with multiple teams to achieve sales targets.

As a Forward Deployed Engineer, you will work on customer integrations with GitLab, designing and implementing solutions in complex enterprise environments while partnering with stakeholders to enhance adoption and reduce time to value.

Lead and grow a distributed engineering organization building customer-facing security capabilities: proprietary scanners, AI/ML detection engines, agentic remediation, vulnerability management, and security foundations. Set vision and roadmap, drive architecture and delivery, partner with product management, establish engineering standards, and represent the group in cross-functional and customer forums.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Provide advanced technical support for major GitLab customers, troubleshooting complex issues across Linux systems, GitLab, CI/CD, applications, infrastructure, and integrations. Build customer relationships, resolve critical incidents, collaborate with Product, Development, Infrastructure, Customer Success, and Sales teams, and create reusable documentation. The role also includes knowledge sharing, technical advising, roadmap influence, and participation in hiring activities within a globally distributed support organization.

Build and operate GitLab’s Gitaly backend storage systems, focusing on distributed storage, Git repository management, reliability, scalability, performance, and observability. Own complex technical initiatives end to end, lead system design, collaborate across engineering and customer-facing teams, mentor engineers, improve development practices, respond to incidents, participate in on-call duties, and implement operational improvements for production systems.