Senior Software Engineer, Security Factory: Code Security

GitLab is seeking a Senior Software Engineer for its Security Factory: Code Security team. As a Senior Backend Engineer, you will help developers find and fix security issues in their code and open-source components. Your work will involve teaching the analysis engine about project dependencies, parsing dependency manifests, and extending the service that automates security advisory merge requests.

Responsibilities:

• Act as the directly responsible individual (DRI) for team initiatives from design through delivery
• Bring systems built by one engineer to team ownership through documentation, tests, and shared review
• Design and ship analyzers that pair deterministic analysis capabilities with AI-driven analysis
• Package analyzers for various platforms, including CI jobs, AI agent workflows, and command-line tools
• Design and ship manifest, lockfile, and SBOM parsing to inform the static analysis engine about project dependencies
• Extend the automated remediation service that turns security advisories into dependency update merge requests
• Solve technical problems of high scope and complexity, and mentor intermediate engineers
• Participate in on-call rotations to assist with troubleshooting and urgent engineering issues

Requirements:

• Experience building LLM tooling, such as a harness or agent pipeline
• Substantial professional experience writing and testing production code in a systems language (Go and/or Rust)
• Familiarity with package managers and dependency management in one or more language ecosystems
• Demonstrated application security experience, such as vulnerability research or secure code review
• A track record of taking ownership of ambiguous problems and shipping with minimal guidance
• Demonstrated capacity to communicate clearly and concisely about technical problems

Helpful experience:

• Experience evaluating AI-driven detection against labeled data
• Experience with performance optimization at scale
• Hands-on program analysis experience, such as parsing or data-flow analysis
• Familiarity with popular web or mobile application frameworks
• Experience with containerized workflows and CI/CD

The base salary range for this role is $139,200-$235,200 USD.