Staff Software Engineer, Security Factory: Static Analysis

GitLab is seeking a Staff Software Engineer for its Security Factory: Static Analysis team. As a Staff Backend Engineer, you will help developers find and fix security issues in their code by setting the technical direction for the static analysis engine.

Your work will span two main areas: the engine side, where you shape how the static analysis toolkit models a program, and the evaluation side, where you build and apply tooling to test, measure, and validate the engine's findings.

Key responsibilities include:

• Acting as the directly responsible individual (DRI) for the team's highest-scope initiatives
• Setting the technical direction for AI-assisted tooling that implements, reviews, and validates engine changes and findings
• Defining the architecture and specifications for the engine and the pipeline that turns source code into findings
• Solving technical problems of the highest scope and complexity
• Mentoring engineers through code review and pairing
• Participating in on-call rotations to assist with troubleshooting

Requirements:

• Experience building LLM tooling, such as a harness, an agent pipeline, or evaluations
• Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language
• Deep program analysis and static analysis background
• Application security experience, such as vulnerability research or secure code review
• Demonstrated capacity to communicate clearly and concisely about complex technical problems
• Track record of taking ownership of ambiguous problems and shipping them from concept to production

The base salary range for this role is $152,800-$259,200 USD.

GitLab offers various benefits, including flexible paid time off, equity compensation, and a growth and development fund.