Staff Software Engineer, Security Factory – Static Analysis

🕒 il y a 6 jours

🌐 États-Unis, Canada, +2 autres pays – Distant

🇺🇸 États-Unis – Télétravail 🇨🇦 Canada – Télétravail 🇮🇱 Israël – Télétravail 🇬🇧 Royaume-Uni – Télétravail

💵 $152 800 - $259 200 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 0%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

GitLab

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2014

💼 Conseil

📣 Marketing

🤖 Intelligence artificielle

💰 Secondary Market en 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab est une plateforme DevOps complète, proposée sous la forme d’une application unique, qui change en profondeur la manière dont les équipes Développement, Sécurité et Ops collaborent et construisent des logiciels. De l’idée à la production, GitLab aide les équipes à réduire le temps de cycle de plusieurs semaines à quelques minutes, à diminuer les coûts de développement et le time to market, tout en augmentant la productivité des développeurs.

Description

• Act as the directly responsible individual for the team's highest-scope initiatives from design through delivery • Ship large features with minimal guidance and shape the team's long-range goals • Bring systems built by one engineer to team ownership through documentation, tests, and shared review • Set technical direction for AI-assisted tooling that implements, reviews, and validates engine changes and findings • Design checks for agent-written changes and generated results, and measure detection quality against benchmark applications with known vulnerabilities • Own the architecture of the program model, including parsing, symbol resolution, intermediate representations, call graphs, taint analysis, and data-flow analysis • Own the pipeline that turns source code into findings and define its extension to new languages and frameworks • Solve high-scope technical problems and advocate for quality, security, and performance improvements • Collaborate with Product Management, UX, Code Security, Composition Analysis, and other partner teams • Mentor engineers through code review and pairing, remove blockers, and improve internal standards • Participate in on-call rotations for product operations, security operations, and urgent engineering issues • Define architecture and specification documents and drive implementation by AI agents and engineers • Build and maintain harnesses, agent instructions, agentic skills, coding and reviewing agents, independent review panels, and performance, API, and dependency gates • Stay current with program analysis and security research, run AI-assisted research and spikes, and turn findings into prototypes, proposals, and upstream contributions • Develop GitLab's SAST capabilities for customer software repositories

🎯 Exigences

• Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy • Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language, with depth in at least one • Willingness to work across Rust, Go, and Ruby • Experience with performance optimization and containerized workflows and CI/CD, including Docker • Deep program analysis and static analysis background, including parsing and ASTs, intermediate representations, SSA, control-flow and call graphs, taint and data-flow analysis, type inference, incremental and fixpoint computation, or detection rules • Ability to read, evaluate, and apply research literature • Deep application security experience, including vulnerability research, secure code review, or writing detection rules • Fluency with OWASP Top 10 and CWE vulnerability classes • Ability to communicate clearly and concisely about complex technical, architectural, and organizational problems • Ability to write architecture and design specifications that bring a team to a decision • Track record of owning ambiguous, team-wide problems and shipping from concept to production with minimal guidance • Experience defining overarching architecture, delegating component specifications to engineers and AI agents, and getting them implemented reliably • Track record of mentoring engineers, raising technical standards, and influencing technical direction by achieving consensus • Familiarity with popular web or mobile application frameworks (helpful) • Experience designing guardrails for agent-written code, such as mutation testing, fuzzing, and CI gates (helpful) • Research community engagement through publications, tool papers, or upstream open source contributions (helpful)

🏖️ Avantages

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave