Top Cybersecurity Jobs

Lead GitLab's threat intelligence as a senior engineer: operate and extend the Threat Intelligence Platform, monitor relevant threats and feeds, perform OSINT and malware analysis to support incident response, automate workflows with code and AI, run purple team exercises, and share intelligence with industry peers to improve defenses.

Lead end-to-end incident response for high-severity security events across cloud environments, perform DFIR investigations, build detection and automation (including AI-assisted) workflows, partner cross-functionally, produce executive communications and RCAs, maintain runbooks/playbooks, and mentor other engineers within a 24/7 global on-call model.

The Staff Infrastructure Security Engineer will lead security initiatives, set architectural patterns, conduct security reviews, and mentor engineers while ensuring security in cloud infrastructures for GitLab.

The role involves managing the security incident response team, handling incidents, coaching team members, and improving security processes, aiming for operational excellence in threat response.

Lead and grow a distributed engineering organization building customer-facing security capabilities: proprietary scanners, AI/ML detection engines, agentic remediation, vulnerability management, and security foundations. Set vision and roadmap, drive architecture and delivery, partner with product management, establish engineering standards, and represent the group in cross-functional and customer forums.

Lead and mature GitLab's security compliance program, expand certification portfolio (SOC 2, ISO, PCI, FedRAMP, etc.), drive automation and AI-enabled compliance workflows, manage auditors and cross-functional stakeholders, mentor a team, and improve metrics, reporting, and regulatory readiness to support business growth.

Lead customer trust and security governance: oversee contract reviews, security questionnaires, and escalations; partner with Legal, Sales, Product, and Procurement; develop templates, policies, playbooks, metrics, and awareness programs; and apply automation and AI to scale workflows and reporting.