# Senior Software Engineer, Security Factory: Code Security

**Company**: GitLab
**Location**: Remote, Canada; Remote, United States
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: $139,200-$235,200 USD
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/gitlab/jobs/8738179002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_c4a486d1-ce2

## Description

GitLab is seeking a Senior Software Engineer for its Security Factory: Code Security team. As a Senior Backend Engineer, you will help developers find and fix security issues in their code and open-source components. Your work will involve teaching the analysis engine about project dependencies, parsing dependency manifests, and extending the service that automates security advisory merge requests.

Responsibilities:

- Act as the directly responsible individual (DRI) for team initiatives from design through delivery

- Bring systems built by one engineer to team ownership through documentation, tests, and shared review

- Design and ship analyzers that pair deterministic analysis capabilities with AI-driven analysis

- Package analyzers for various platforms, including CI jobs, AI agent workflows, and command-line tools

- Design and ship manifest, lockfile, and SBOM parsing to inform the static analysis engine about project dependencies

- Extend the automated remediation service that turns security advisories into dependency update merge requests

- Solve technical problems of high scope and complexity, and mentor intermediate engineers

- Participate in on-call rotations to assist with troubleshooting and urgent engineering issues

Requirements:

- Experience building LLM tooling, such as a harness or agent pipeline

- Substantial professional experience writing and testing production code in a systems language (Go and/or Rust)

- Familiarity with package managers and dependency management in one or more language ecosystems

- Demonstrated application security experience, such as vulnerability research or secure code review

- A track record of taking ownership of ambiguous problems and shipping with minimal guidance

- Demonstrated capacity to communicate clearly and concisely about technical problems

Helpful experience:

- Experience evaluating AI-driven detection against labeled data

- Experience with performance optimization at scale

- Hands-on program analysis experience, such as parsing or data-flow analysis

- Familiarity with popular web or mobile application frameworks

- Experience with containerized workflows and CI/CD

The base salary range for this role is $139,200-$235,200 USD.

## Skills

### Required
- Go
- Rust
- LLM tooling
- application security
- vulnerability research
- secure code review

### Nice to have
- AI-driven detection
- performance optimization
- program analysis
- containerized workflows

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/gitlab/jobs/8738179002?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)