Threat Research Engineer, Security Factory: Threat Research

GitLab is seeking a Threat Research Engineer to join its Security Factory: Threat Research team remotely from Israel, Poland, or the United Kingdom.

As a Threat Research Engineer, you'll take ideas from initial questions to working proofs of concept, deploy them, and analyze the results. This full-stack role heavily incorporates AI into daily workflows. You'll build agentic workflows for research, analysis, and detection, utilizing AI tools daily to enhance efficiency.

Key responsibilities include:

• Researching new attack surfaces and threat vectors, including AI coding agents and package ecosystems.
• Identifying and responsibly disclosing vulnerabilities in open-source projects and developer tools.
• Analyzing software supply chain incidents and events.
• Developing AI-powered workflows and agents for automation.
• Building and maintaining cloud-based systems for detection and advisory work.
• Improving the quality and coverage of vulnerability and malware advisories.
• Presenting findings as blog posts and conference presentations.
• Participating in on-call or operational support as needed.

The ideal candidate will have hands-on security experience in research, malware analysis, or penetration testing, with a developer mindset and adversarial thinking. Proficiency in Go or Python, experience with AI tools, and strong software engineering practices are essential.

GitLab offers a supportive work environment with benefits including health, financial, and well-being support, flexible paid time off, equity compensation, and a growth and development fund.

The base salary range for this role is 272,000 - 408,000 PLN for residents of Poland.