Senior Backend Engineer, SSCS – Supply Chain

🕒 April 11

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

💰 Secondary Market on 2020-11

Artificial Intelligence • Enterprise • SaaS

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Design and implement backend features across the Add-On's software supply chain security surface, including policy enforcement, artifact signing and verification, provenance attestation APIs, and malicious package detection integrations • Build and improve the package policy evaluation engine, including rule compilation, request matching, enforcement decisions, and performance-sensitive execution paths tied to GitLab's Dependency Firewall infrastructure • Develop artifact signing and verification workflows, including Sigstore and Cosign integrations • Create and evolve the configuration interfaces that enterprise security teams use, including backend APIs and the GraphQL surface • Integrate Add-On capabilities with GitLab's existing security policy framework • Collaborate with adjacent teams as malicious package intelligence is incorporated into the Add-On offering • Write and maintain comprehensive RSpec and integration test coverage • Review merge requests with a security-first mindset

🎯 Requirements

• Proven backend engineering experience, including production Ruby on Rails expertise • Working knowledge of Go or a clear willingness to ramp up quickly in it • Solid API design skills, including experience with REST, GraphQL, and defining clear internal service boundaries • Solid PostgreSQL fundamentals, including schema design, query optimization, and indexing strategies • Experience with Redis for caching and distributed coordination patterns • A security-aware engineering mindset, with sound judgment around trust boundaries, input validation, and failure modes • Familiarity with software supply chain security concepts such as Supply-chain Levels for Software Artifacts (SLSA), software bill of materials (SBOM), artifact signing, or related security scanning approaches • Interest in complex policy, registry, or platform problems, including areas such as rules engines, package ecosystems, cryptographic signing, or DevSecOps product development.

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental leave • Home office support