Buscar Empregos Remotos

Principal Security Researcher

🕒 Setembro 5

💵 $203.200 - $275.000 / ano

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🗣️🇺🇸🇬🇧 Inglês obrigatório

De onde vem esta vaga

Publicada na página de carreiras da GitLab, não em um site de vagas

Vista pela primeira vez pelo Remote Rocketship Setembro 5

Ainda aberta no site da GitLab. Verificada 5 horas atrás.

Logo of GitLab

GitLab

1001 - 5000 funcionários

Fundada em 2014

💼 Consultoria

📣 Marketing

🤖 Inteligência Artificial

💰 Secondary Market em 2020-11

Consulting • Marketing • Artificial Intelligence

O GitLab é uma plataforma completa de DevOps, entregue como uma única aplicação, que transforma fundamentalmente a forma como os times de Desenvolvimento, Segurança e Ops colaboram e desenvolvem software. Da ideia à produção, o GitLab ajuda os times a reduzir o tempo de ciclo de semanas para minutos, diminuir os custos de desenvolvimento e o time to market, ao mesmo tempo em que aumenta a produtividade dos desenvolvedores.

Descrição

• Conduct and lead security research projects across multiple functional areas • Identify novel, systemic, and chained vulnerabilities in GitLab • Validate security vulnerabilities through hands-on testing and develop proof-of-concept exploits • Assess emerging industry vulnerability classes against the GitLab codebase and drive class-level remediation • Lead security research into GitLab's AI and agentic surfaces and define security requirements • Build and direct tooling and automation for security research, including agent-assisted vulnerability discovery • Research the security posture of open source tools and dependencies integrated with GitLab • Report findings to maintainers and track mitigation under responsible disclosure guidelines • Solve technical problems of the highest scope, complexity, and ambiguity • Help shape the team and sub-department roadmap • Lead integration of security research results into engineering and business functions • Teach, mentor, and advise domain experts and individual contributors • Share knowledge and novel vulnerability types with the security community • Report to the Senior Manager of Application Security

🎯 Requisitos

• 10+ years of experience in security research, penetration testing, or offensive security roles • Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems • Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust • Ability to read and analyze code across multiple languages and codebases • Strong knowledge of AI frameworks • Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation • At ease in establishing and driving complex remediation initiatives involving cross-functional teams • Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner • Ability to translate complex technical findings into clear risk assessments and remediation recommendations • Strong analytical and problem-solving skills with creative thinking about attack scenarios • Nice to Have: Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms

🏖️ Benefícios

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave

Candidatar-se

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Vagas Similares

🕒 Setembro 4

AAA

5001 - 10000

🚘 Automotivo

🛡️ Seguros

📦 Logística

Enterprise AI Security Architect securing cloud, hybrid, and emerging AI environments for CSAA, a U.S. personal-lines property and casualty insurer. Defining enterprise security architectures, guardrails, and governance.

🗣️🇺🇸🇬🇧 Inglês obrigatório

🕒 Setembro 4

Samsara

1001 - 5000

📦 Logística

🏗️ Construção

🏥 Saúde

Staff Offensive Security Engineer leading vulnerability management and application security for Samsara’s Connected Operations Cloud. Building automation across cloud, firmware, IoT, and corporate systems.

🇺🇸 Estados Unidos – Remoto (EUA)

💵 £138.800 - £173.500 / ano

💰 Seed Round em 2014-08

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

infoinfo

🗣️🇺🇸🇬🇧 Inglês obrigatório

🕒 Setembro 4

Samsara

1001 - 5000

📦 Logística

🏗️ Construção

🏥 Saúde

Staff Offensive Security Engineer leading vulnerability management for Samsara's Connected Operations Cloud. Automating security across cloud, firmware, IoT, and corporate systems.

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $165.200 - $265.500 / ano

💰 Seed Round em 2014-08

⏰ Tempo Integral

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

infoinfo

🗣️🇺🇸🇬🇧 Inglês obrigatório

🕒 Setembro 4

Zero Hash

51 - 200

💳 Fintech

₿ Cripto

🌐 Web 3

Security Architect securing zerohash’s crypto and stablecoin infrastructure platform. Designing cloud, blockchain, and application security across global financial services systems.

🇺🇸 Estados Unidos – Remoto (EUA)

💰 $105.000.000 Series D em 2022-01

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🦅 Patrocina Visto H1B

infoinfo

🗣️🇺🇸🇬🇧 Inglês obrigatório

🕒 Setembro 4

Optiv

1001 - 5000

Security engineering director leading SIEM, EDR, SOAR, and MDR platforms for Optiv’s managed security services. Directing practice strategy, service quality, automation, staffing, and client escalations.

🗣️🇺🇸🇬🇧 Inglês obrigatório

Desenvolvido por Lior Neu-ner. Adoraria receber seu feedback — entre em contato por DM ou pelo e-mail support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok