Staff Corporate Security Engineer

GitLab is seeking a Staff Corporate Security Engineer to help secure the systems its team members rely on every day across a fully remote environment.

As a Senior Corporate Security Engineer, you'll help build secure-by-default controls for endpoints and SaaS platforms, focusing on macOS.

Responsibilities:

• Lead the security architecture of GitLab's endpoint fleet and related infrastructure, primarily focusing on macOS.
• Design and support automation for secure endpoint deployment, configuration, and lifecycle management using code-based workflows.
• Manage endpoint and SaaS security configuration through Terraform, version control, merge requests, continuous integration pipelines, and automated rollouts.
• Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
• Develop patching and software distribution approaches that align with security, compliance, and operational requirements.
• Collaborate with Information Technology, Security Operations, and Detection and Response teams to improve endpoint telemetry, detections, and response models.
• Drive process improvements that reduce manual work and lower risk through automation, policy-driven controls, and auditable change management.
• Mentor engineers across Corporate Security and Information Technology, serving as a senior escalation point for complex endpoint security issues.

Requirements:

• Experience designing and delivering endpoint, systems, or corporate security solutions in environments requiring scalable, durable controls.
• Deep knowledge of endpoint management platforms such as Jamf Pro or FleetDM, particularly for architecting and securing macOS environments.
• Strong hands-on ability with Terraform and Infrastructure-as-Code practices.
• Experience working with GitOps workflows.
• Strong proficiency in scripting or programming for automation and security tooling.
• Familiarity with cloud identity providers and directories.
• Ability to communicate clearly, collaborate across distributed teams, and work independently in an all-remote environment.

Benefits:

• Benefits to support health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave