Staff Infrastructure Security Engineer @GitLab

Overview

GitLab is seeking a Staff Infrastructure Security Engineer to join its Infrastructure Security Team within the Product Security Department. This role involves working with teams across GitLab to ensure robust security for public cloud infrastructure, enabling customers to achieve their DevSecOps goals.

Key Responsibilities

• Set architectural patterns and foundational security automation for infrastructure security implementation.
• Lead infrastructure security initiatives, transforming ambiguous work into executable streams with clear success criteria.
• Conduct security reviews and threat modeling for complex infrastructure components, identifying risks and driving remediation.
• Determine the team’s approach to AI-assisted security engineering and establish adoptable patterns.
• Act as a technical authority within Infrastructure Security, advising stakeholders and translating technical tradeoffs.
• Collaborate on technical planning and roadmap development to align with business objectives.
• Mentor engineers, enhancing their skills and promoting inclusive collaboration.
• Secure GitLab Infrastructure using its own product.

Requirements

• Expert knowledge of security for cloud infrastructure (AWS/GCP/Azure) and container orchestration (Kubernetes).
• Proficiency in programming languages (Go, Python, Ruby) and experience in production-quality security tooling.
• Extensive experience with Infrastructure-as-Code security (Terraform, Ansible, CloudFormation).
• Hands-on experience applying AI to security workflows.
• Proven track record in leading technical initiatives and setting direction for peer teams.
• Strong communication skills for conveying security tradeoffs to diverse audiences.
• Familiarity with security certifications, frameworks, and standards (e.g., FedRAMP, ISO 27001).
• Alignment with GitLab’s values.

Benefits

• Health, financial, and well-being support.
• Flexible Paid Time Off.
• Team Member Resource Groups.
• Equity Compensation & Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental Leave.

Location

This role is remote and open to candidates in India, Israel, the United Kingdom, and the United States.

How to Apply

Interested applicants are encouraged to apply directly to the position.