Senior Security Engineer, Security Incident Response Team – EMEA

🕒 July 10

🌐 Israel, United Kingdom – Remote

🇮🇱 Israel – Remote 🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

🛡️ Security Operations

👻 Ghost score 22%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Lead and coordinate end-to-end incident response for high-severity security events within a 24/7 global on-call model, operating during EMEA business hours • Prepare clear executive communications during incidents • Investigate complex security incidents across cloud environments using DFIR methodologies • Partner with Signals Engineering to design and implement detection capabilities, including SIEM use cases, alerting strategies, and telemetry pipelines • Build and enhance automation and AI-assisted workflows to improve triage, investigation speed, and response consistency • Partner with Threat Intelligence to contextualize threats and improve detection coverage • Conduct root cause analysis and lead post-incident reviews • Develop and maintain runbooks, playbooks, and operational documentation • Collaborate cross-functionally during incidents and lead proactive initiatives such as tabletops • Mentor other engineers and help elevate incident response maturity

🎯 Requirements

• Strong experience in security incident response and investigations in cloud-first environments • Experience using or administering Git/GitLab in a security or engineering context • Hands-on experience with SIEM, EDR, and/or detection engineering • Experience with cloud platforms (AWS & GCP) • Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK) • Experience building or working with automation (e.g., Python, scripting, SOAR platforms) • Interest or experience in applying AI/ML or data-driven techniques to detection, triage, or response workflows • Strong analytical and problem-solving skills; ability to operate effectively during high-severity incidents • Excellent written communication skills with a passion for clear, actionable documentation • Growth mindset with a proactive approach to identifying and mitigating security risks

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave • Remote work arrangement