Who can apply: US-based role. The employer has not said which states are eligible — confirm before applying.
Location as listed by the employer: “Remote, Canada; Remote, United States; United States of America”
Apply on GitLab's site ↗
Opens the employer's official application page.
Generate a CV for this job
Generate my CV
A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.
About this role
GitLab is hiring for a Senior Software Engineer, Security Factory: Code Security role. See the official posting for full details.
Requirements
- Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't
- Substantial professional experience writing and testing production code in a systems language, particularly Go and/or Rust, with depth in at least one. We use both, plus Ruby on the remediation side and Python for some…
- Familiarity with package managers and dependency management in one or more language ecosystems, such as npm, Maven, pip, Bundler, or Cargo. Experience building tooling around them is better still.
- Demonstrated application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE) and the software supply chain
- A track record of taking ownership of ambiguous problems and shipping with minimal guidance, with the self-motivation and organizational skills suited to a remote, largely asynchronous environment
- Demonstrated capacity to communicate clearly and concisely about technical problems, and to write design proposals that bring a team to a decision
- Experience evaluating AI-driven detection against labeled data, including measuring false positives and missed findings
- Experience with performance optimization at scale
Summarized from the employer's posting — check the full posting for every requirement.
New remote jobs for your state, by email.
A short digest only when there's something new. Confirm by email, unsubscribe anytime.