Overview
As a Senior Corporate Security Engineer at GitLab, you will help secure the systems relied upon by the GitLab team across a fully remote environment. This role focuses on building secure controls for endpoints, particularly with a strong emphasis on macOS.
Key Responsibilities
- Lead the security architecture of GitLab's endpoint fleet and related infrastructure, primarily focusing on macOS.
- Design and support automation for secure endpoint deployment and lifecycle management using code-based workflows.
- Manage endpoint and SaaS security configuration through Terraform and automated rollouts.
- Define and enforce security baselines across various endpoint operating systems.
- Develop patching and software distribution approaches that align with security and compliance needs.
- Collaborate with IT, Security Operations, and Detection and Response teams to enhance endpoint telemetry.
- Drive process improvements that favor automation and auditable change management.
- Mentor engineers and serve as a senior escalation point for complex endpoint security issues.
Requirements
- Experience in designing and delivering endpoint or corporate security solutions.
- Deep knowledge of endpoint management platforms like Jamf Pro or FleetDM.
- Strong hands-on skills with Terraform and Infrastructure-as-Code practices.
- Experience with GitOps workflows for change management.
- Proficiency in scripting or programming languages such as bash, Python, PowerShell, or Go.
- Familiarity with cloud identity providers like Okta or Google Workspace.
- Effective communication and collaboration skills in a remote work environment.
- Openness to applying experience from adjacent security or engineering fields.
Benefits
- Health, financial, and well-being benefits.
- Flexible Paid Time Off.
- Team Member Resource Groups.
- Equity Compensation & Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental Leave.
Location
Remote, Canada; Remote, United States
How to Apply
Please submit your application through the GitLab recruitment process.
Deadline
Not specified