Staff Software Engineer, Security Factory – Static Analysis

🕒 vor 6 Tagen

🌐 Vereinigte Staaten, Kanada, +2 weitere Länder – Remote

🇺🇸 Vereinigte Staaten – Remote 🇨🇦 Kanada – Remote 🇮🇱 Israel – Remote 🇬🇧 Vereinigtes Königreich – Remote

💵 $152.800 - $259.200 / Jahr

⏰ Vollzeit

🔴 Experte

👮‍♂️ IT-Sicherheitsingenieur

👻 Geisterscore 0%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

GitLab

WebsiteLinkedInAlle Stellen

1001 - 5000 Mitarbeiter

Gegründet 2014

💼 Beratung

📣 Marketing

🤖 Künstliche Intelligenz

💰 Secondary Market im 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab ist eine vollständige DevOps-Plattform, bereitgestellt als eine einzige Anwendung, die die Art und Weise, wie Development-, Security- und Ops-Teams zusammenarbeiten und Software entwickeln, grundlegend verändert. Von der Idee bis zur Produktion hilft GitLab Teams, die Durchlaufzeit von Wochen auf Minuten zu verkürzen, Entwicklungskosten und Time-to-Market zu senken und gleichzeitig die Developer-Produktivität zu steigern.

Beschreibung

• Act as the directly responsible individual for the team's highest-scope initiatives from design through delivery • Ship large features with minimal guidance and shape the team's long-range goals • Bring systems built by one engineer to team ownership through documentation, tests, and shared review • Set technical direction for AI-assisted tooling that implements, reviews, and validates engine changes and findings • Design checks for agent-written changes and generated results, and measure detection quality against benchmark applications with known vulnerabilities • Own the architecture of the program model, including parsing, symbol resolution, intermediate representations, call graphs, taint analysis, and data-flow analysis • Own the pipeline that turns source code into findings and define its extension to new languages and frameworks • Solve high-scope technical problems and advocate for quality, security, and performance improvements • Collaborate with Product Management, UX, Code Security, Composition Analysis, and other partner teams • Mentor engineers through code review and pairing, remove blockers, and improve internal standards • Participate in on-call rotations for product operations, security operations, and urgent engineering issues • Define architecture and specification documents and drive implementation by AI agents and engineers • Build and maintain harnesses, agent instructions, agentic skills, coding and reviewing agents, independent review panels, and performance, API, and dependency gates • Stay current with program analysis and security research, run AI-assisted research and spikes, and turn findings into prototypes, proposals, and upstream contributions • Develop GitLab's SAST capabilities for customer software repositories

🎯 Anforderungen

• Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy • Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language, with depth in at least one • Willingness to work across Rust, Go, and Ruby • Experience with performance optimization and containerized workflows and CI/CD, including Docker • Deep program analysis and static analysis background, including parsing and ASTs, intermediate representations, SSA, control-flow and call graphs, taint and data-flow analysis, type inference, incremental and fixpoint computation, or detection rules • Ability to read, evaluate, and apply research literature • Deep application security experience, including vulnerability research, secure code review, or writing detection rules • Fluency with OWASP Top 10 and CWE vulnerability classes • Ability to communicate clearly and concisely about complex technical, architectural, and organizational problems • Ability to write architecture and design specifications that bring a team to a decision • Track record of owning ambiguous, team-wide problems and shipping from concept to production with minimal guidance • Experience defining overarching architecture, delegating component specifications to engineers and AI agents, and getting them implemented reliably • Track record of mentoring engineers, raising technical standards, and influencing technical direction by achieving consensus • Familiarity with popular web or mobile application frameworks (helpful) • Experience designing guardrails for agent-written code, such as mutation testing, fuzzing, and CI gates (helpful) • Research community engagement through publications, tool papers, or upstream open source contributions (helpful)

🏖️ Vorteile

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave