Top Cyber Security Jobs

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Lead GitLab's threat intelligence as a senior engineer: operate and extend the Threat Intelligence Platform, monitor relevant threats and feeds, perform OSINT and malware analysis to support incident response, automate workflows with code and AI, run purple team exercises, and share intelligence with industry peers to improve defenses.

Lead end-to-end incident response for high-severity security events across cloud environments, perform DFIR investigations, build detection and automation (including AI-assisted) workflows, partner cross-functionally, produce executive communications and RCAs, maintain runbooks/playbooks, and mentor other engineers within a 24/7 global on-call model.

The Staff Infrastructure Security Engineer will lead security initiatives, set architectural patterns, conduct security reviews, and mentor engineers while ensuring security in cloud infrastructures for GitLab.

The role involves managing the security incident response team, handling incidents, coaching team members, and improving security processes, aiming for operational excellence in threat response.

Lead and grow a distributed engineering organization building customer-facing security capabilities: proprietary scanners, AI/ML detection engines, agentic remediation, vulnerability management, and security foundations. Set vision and roadmap, drive architecture and delivery, partner with product management, establish engineering standards, and represent the group in cross-functional and customer forums.

Lead customer trust and security governance: oversee contract reviews, security questionnaires, and escalations; partner with Legal, Sales, Product, and Procurement; develop templates, policies, playbooks, metrics, and awareness programs; and apply automation and AI to scale workflows and reporting.