Senior Software Engineer, Code Security

🔥 0 minutes ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

💵 $139.2k - $235.2k / year

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Act as the directly responsible individual for team initiatives from design through delivery • Bring systems built by one engineer to team ownership through documentation, tests, and shared review • Design and ship analyzers combining deterministic analysis with AI-driven analysis • Build evaluation harnesses measuring false positives and missed findings against benchmark applications • Develop detection rules mapped to CWE and test fixtures • Package analyzers for CI jobs, AI agent workflows, and command-line tools using GitLab security report formats • Design and ship manifest, lockfile, and SBOM parsing across ecosystems and formats • Extend automated remediation that turns security advisories into dependency update merge requests • Solve high-scope technical problems and improve quality, security, and performance with cross-functional and partner teams • Mentor Intermediate engineers through code review and pairing • Participate in on-call rotations for product, security, and urgent engineering issues

🎯 Requirements

• Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy • Substantial professional experience writing and testing production code in a systems language, particularly Go and/or Rust, with depth in at least one • Willingness to work across Go, Rust, Ruby, and Python • Familiarity with package managers and dependency management in one or more ecosystems, such as npm, Maven, pip, Bundler, or Cargo • Demonstrated application security experience, such as vulnerability research, secure code review, or writing detection rules • Fluency with OWASP Top 10, CWE, and the software supply chain • Track record of taking ownership of ambiguous problems and shipping with minimal guidance • Self-motivation and organizational skills suited to a remote, largely asynchronous environment • Capacity to communicate clearly and concisely about technical problems • Ability to write design proposals that bring a team to a decision • Helpful: experience evaluating AI-driven detection against labeled data, performance optimization at scale, program analysis, web/mobile application frameworks, containerized workflows, and CI/CD

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave