Remote Jobs Now
GitLab

Staff Software Engineer, Security Factory: Static Analysis

Who can apply: US-based role. The employer has not said which states are eligible — confirm before applying.
Location as listed by the employer: “Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States; United States of America”
Apply on GitLab's site ↗

Opens the employer's official application page.

Generate a CV for this job

A CV tailored to this job's requirements in one click — boosted with testimonials from people who know your work.

Generate my CV

About this role

GitLab is hiring for a Staff Software Engineer, Security Factory: Static Analysis role. See the official posting for full details.

Requirements

  • Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy and when it isn't
  • Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language, with depth in at least one. The engine is Rust, the analyzer wrapper is Go, and the monoli…
  • Experience with performance optimization and with containerized workflows and CI/CD (we use Docker heavily)
  • A deep program analysis and static analysis background, such as parsing and ASTs, intermediate representations (SSA, control-flow and call graphs), taint and data-flow analysis, type inference, incremental and fixpoint…
  • Deep application security experience, such as vulnerability research, secure code review, or writing detection rules, and fluency with vulnerability classes (OWASP Top 10, CWE)
  • Demonstrated capacity to communicate clearly and concisely about complex technical, architectural, and organizational problems, and to write architecture and design specifications that bring a team to a decision
  • A track record of taking ownership of ambiguous, team-wide problems and shipping them from concept to production with minimal guidance, with specific, regular async updates on progress, blockers, risks, and next steps
  • Experience defining a system's overarching architecture, delegating component specifications to engineers and AI agents, and getting them implemented reliably

Summarized from the employer's posting — check the full posting for every requirement.