Staff Security Researcher

🕒 vor 1 Monat

🌐 Vereinigte Staaten, Kanada, +2 weitere Länder – Remote

infoinfo

💵 $168.000 - $238.000 / Jahr

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 0%

infoinfo

🗣️🇺🇸🇬🇧 Englisch erforderlich

Jetzt Bewerben
Ähnliche Remote-Jobs finden

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Logo of GitLab

GitLab

1001 - 5000 Mitarbeiter

Gegründet 2014

💼 Beratung

📣 Marketing

🤖 Künstliche Intelligenz

💰 Secondary Market im 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab ist eine vollständige DevOps-Plattform, bereitgestellt als eine einzige Anwendung, die die Art und Weise, wie Development-, Security- und Ops-Teams zusammenarbeiten und Software entwickeln, grundlegend verändert. Von der Idee bis zur Produktion hilft GitLab Teams, die Durchlaufzeit von Wochen auf Minuten zu verkürzen, Entwicklungskosten und Time-to-Market zu senken und gleichzeitig die Developer-Produktivität zu steigern.

Beschreibung

• Conduct security research in two or more specialty areas • Identify novel, systemic, and chained vulnerabilities in GitLab • Validate vulnerabilities through hands-on testing and proof-of-concept exploits • Assess emerging vulnerability classes against the GitLab codebase and drive remediation • Research GitLab's AI and agentic surfaces and help define security requirements • Build tooling and automation for scalable security research, including agent-assisted vulnerability discovery • Research the security posture of open source tools and dependencies, report findings to maintainers, and track mitigation • Solve technical problems of high scope, complexity, and ambiguity • Define and implement security technical and process improvements • Contribute to the team roadmap • Provide actionable feedback to engineering teams • Mentor and advise individual contributors • Share knowledge and novel vulnerability types with the security community • Report to the Senior Manager of Application Security

🎯 Anforderungen

• 7+ years of experience in security research, penetration testing, or offensive security roles • Hands-on experience discovering and exploiting vulnerabilities • Subject matter expertise in at least two technical areas impacting product security • Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust • Ability to read and analyze code across multiple languages and codebases • Understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation • Experience leading technical objectives in cross-functional teams • Excellent written communication skills with ability to articulate complex topics clearly and concisely • Ability to translate complex technical findings into clear risk assessments and remediation recommendations • Strong analytical and problem-solving skills with creative thinking about attack scenarios • Published security research or conference presentations (nice to have) • Background in software engineering with distributed systems expertise (nice to have) • Security certifications such as OSCP, OSCE, GPEN, or similar (nice to have) • Experience with GitLab or similar DevSecOps platforms (nice to have)

🏖️ Vorteile

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave

Jetzt Bewerben

Ähnliche Jobs

🕒 vor 1 Monat

Samsara

1001 - 5000

📦 Logistik

🏗️ Bauwesen

🏥 Gesundheitswesen

Staff Offensive Security Engineer leading vulnerability management for Samsara's Connected Operations Cloud. Automating security across cloud, firmware, IoT, and corporate systems.

🇺🇸 Vereinigte Staaten – Remote

💵 $165.200 - $265.500 / Jahr

💰 Seed Round im 2014-08

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

infoinfo

🗣️🇺🇸🇬🇧 Englisch erforderlich

🕒 vor 1 Monat

Samsara

1001 - 5000

📦 Logistik

🏗️ Bauwesen

🏥 Gesundheitswesen

Staff Offensive Security Engineer leading vulnerability management and application security for Samsara’s Connected Operations Cloud. Building automation across cloud, firmware, IoT, and corporate systems.

🇺🇸 Vereinigte Staaten – Remote

💵 £138.800 - £173.500 / Jahr

💰 Seed Round im 2014-08

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

infoinfo

🗣️🇺🇸🇬🇧 Englisch erforderlich

🕒 vor 1 Monat

Zero Hash

51 - 200

💳 Fintech

₿ Crypto

🌐 Web 3

Security Architect securing zerohash’s crypto and stablecoin infrastructure platform. Designing cloud, blockchain, and application security across global financial services systems.

🇺🇸 Vereinigte Staaten – Remote

💰 €105.000.000 Series D im 2022-01

⏰ Vollzeit

🟠 Senior

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

infoinfo

🗣️🇺🇸🇬🇧 Englisch erforderlich

AWS

Cloud

Cyber Security

Kubernetes

SDLC

Web3

🕒 vor 1 Monat

Optiv

1001 - 5000

Security engineering director leading SIEM, EDR, SOAR, and MDR platforms for Optiv’s managed security services. Directing practice strategy, service quality, automation, staffing, and client escalations.

🗣️🇺🇸🇬🇧 Englisch erforderlich

🕒 vor 1 Monat

AHEAD

1001 - 5000

💼 Beratung

🤖 Künstliche Intelligenz

🏢 Unternehmen

Principal Technical Consultant securing cloud platforms and applications for AHEAD, which builds digital business platforms. Leading cloud security, application security, client delivery, and security service development.

🇺🇸 Vereinigte Staaten – Remote

💵 $250.000 - $300.000 / Jahr

💰 €5.697.750 Venture Round - AHEAD im 2024-05

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

🗣️🇺🇸🇬🇧 Englisch erforderlich