Principal Field Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $203.2k - $285k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Serve as the primary security point of contact for enterprise customer questions, requests, and concerns • Join customer and prospect meetings to provide expert guidance on GitLab’s security practices and controls • Build and maintain templates, playbooks, fallback positions, and training to simplify and accelerate negotiations • Facilitate customer assurance activities through the Customer Assurance Activities Service Desk • Provide escalation support for complex security questionnaires, RFPs, and risk assessments • Perform comprehensive contract reviews for customer agreements and vendor relationships • Analyze security and compliance clauses in legal documents • Provide risk-based recommendations and remediation guidance for contractual security requirements • Partner with Legal, Sales, Product, and Procurement teams to negotiate security-related contract terms • Manage escalations, collaborate across teams, and develop solutions to enable business partners to close deals • Document and track contract-related security obligations • Develop internal and external security content, including blog posts, whitepapers, technical standards, and field sales enablement training materials • Track the evolving regulatory landscape and identify solutions for customer trends and improvement areas • Build and strengthen GitLab’s security brand within the industry • Maintain and enhance GitLab’s Trust Center and self-service security resources • Provide strategic recommendations based on customer security concerns in support of revenue growth • Participate in Quarterly Business Reviews to inform product and security roadmap decisions • Mentor and guide Security Assurance team members • Drive continuous improvement of Field Security processes and documentation • Design and implement solutions enabling Sales-facing teams to discuss security topics with customers

🎯 Requirements

• 10+ years of experience in information security, with at least 5 years in customer-facing security roles • Deep expertise in security frameworks and standards such as SOC 2, ISO 27001/27017/27018/42001, FedRAMP, and NIST CSF • Expertise in GDPR, CCPA, DORA, and EU AI Act • Proven track record of contract negotiation and security/privacy agreement reviews • Exceptional written and verbal communication skills with ability to translate complex technical concepts for diverse audiences • Experience creating security content, including blogs, whitepapers, and presentations • Strong understanding of cloud security, SaaS security models, and DevSecOps practices • Experience working cross-functionally with Sales, Legal, Product, and Engineering teams • Ability to balance security risk with business objectives • Experience speaking at conferences is a plus • Preferred: one or more relevant certifications such as CISSP, CISA, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, or CIPP/CIPM • Equivalent demonstrated experience is equally valued

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume