Principal Security Researcher

GitLab is seeking a Principal Security Researcher to join its Application Security Team. The successful candidate will conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities.

Responsibilities:

• Conduct and lead security research projects across multiple functional areas.
• Identify novel, systemic, and chained vulnerabilities in GitLab.
• Validate security vulnerabilities through hands-on testing and develop proof-of-concept exploits.
• Assess emerging industry vulnerability classes against the GitLab codebase.
• Lead security research into GitLab's AI and agentic surfaces.
• Build and direct the tooling and automation that scales security research.
• Research the security posture of open source tools and dependencies integrated with GitLab.
• Solve technical problems of the highest scope, complexity, and ambiguity.
• Help shape the team and sub-department roadmap.
• Lead the integration of security research results into engineering and business functions.
• Teach, mentor, and advise other domain experts and individual contributors.
• Share knowledge and novel vulnerability types with the security community.

Requirements:

• 10+ years of experience in security research, penetration testing, or offensive security roles.
• Strong ability in discovering and exploiting vulnerabilities in large codebases and complex systems.
• Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust.
• Ability to read and analyze code across multiple languages and codebases.
• Strong knowledge of AI frameworks.
• Strong understanding of AI attack vectors.
• Excellent written communication skills.
• Ability to translate complex technical findings into clear risk assessments and remediation recommendations.
• Strong analytical and problem-solving skills with creative thinking about attack scenarios.

Benefits:

• Benefits to support health, finances, and well-being.
• Flexible Paid Time Off.
• Team Member Resource Groups.
• Equity Compensation & Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental Leave.

Salary Range: $203,200-$275,000 USD