Overview
As a Senior Security Engineer on GitLab’s Security Incident Response Team (SIRT), you will play a critical role in defending GitLab.com and the broader environment against evolving security threats. You will lead high-impact incidents, drive improvements in defense, detection, and response capabilities, and help scale security operations through automation.
Key Responsibilities
- Lead and coordinate end-to-end incident response for high-severity security events within a 24/7 global on-call model.
- Prepare clear executive communications to inform stakeholders during incidents.
- Investigate complex security incidents across cloud environments using strong Digital Forensics and Incident Response methodologies.
- Collaborate with Signals Engineering to design and implement detection capabilities, including SIEM use cases and alerting strategies.
- Build and enhance automation and AI-assisted workflows for improved triage and investigation.
- Work with Threat Intelligence to contextualize threats and improve detection coverage.
- Conduct root cause analysis and lead post-incident reviews to drive continuous improvement.
- Develop and maintain operational documentation, including runbooks and playbooks.
- Mentor other engineers to elevate the team’s overall incident response maturity.
Requirements
- Strong experience in security incident response and investigations in cloud-first environments.
- Experience using or administering Git/GitLab in a security context.
- Hands-on experience with SIEM, EDR, and detection engineering.
- Experience with cloud platforms such as AWS and GCP.
- Familiarity with threat intelligence and adversary tactics like MITRE ATT&CK.
- Experience with automation tools and techniques (e.g., Python, scripting, SOAR platforms).
- Strong analytical and problem-solving skills.
- Excellent written communication skills.
Benefits
- Benefits to support your health, finances, and well-being.
- Flexible Paid Time Off.
- Team Member Resource Groups.
- Equity Compensation & Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental Leave.
Location
Remote; eligible in Israel, Poland, and the United Kingdom.
How to Apply
Please submit your application through the GitLab careers page.