Threat Research Engineer, Security

🔥 23 minutes ago

🌐 Poland, Israel, +1 more countries – Remote

🇵🇱 Poland – Remote 🇮🇱 Israel – Remote 🇬🇧 United Kingdom – Remote

💵 zł272k - zł408k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 48 days.

Apply Now

Find Similar Remote Jobs

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Research new attack surfaces and threat vectors, including AI coding agents, agent plugins, and package ecosystems • Find and responsibly disclose vulnerabilities in open source projects and developer tools • Analyze software supply chain incidents and events • Build AI-powered workflows and agents that automate research, analysis, and detection • Build and maintain cloud-based systems behind detection and advisory work • Improve the quality and coverage of vulnerability and malware advisories • Write findings as blog posts and present them at conferences • Participate in on-call or operational support where required • Take ideas from the first question to a working proof of concept, deploy it, and analyze the results

🎯 Requirements

• Hands-on security experience in research, malware analysis, penetration testing, or security tooling, with both a developer mindset and an adversarial mindset • Demonstrated experience using AI in real work, such as building with large language model APIs or agent frameworks like LangChain, LangGraph, or agent SDKs • Strong programming skills in Go or Python • Good software engineering practices including testing, code review, continuous integration and continuous delivery, and maintainable code • Experience deploying and running production services on a public cloud • Understanding of package ecosystems and software supply chain attacks • Ability to map possible attack vectors, name trade-offs, and make data-driven decisions • Clear writing that explains findings to both engineers and a general audience • Helpful, but not required: published vulnerability findings; security research on AI agents, large language model applications, or Model Context Protocol (MCP) servers; Google Cloud Platform experience; or infrastructure as code experience with Terraform or OpenTofu • High-level understanding of compilers or static application security testing engines is sufficient

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume