Staff Infrastructure Security Engineer

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $168k - $238k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Set the technical direction, architectural patterns, reference implementations, and foundational security automation for infrastructure security in GitLab's FedRAMP environment and broader Dedicated and Self-Managed offerings • Own the security posture of GitLab's FedRAMP environment as the senior technical voice, partnering with the Public Sector SRE team • Lead infrastructure security initiatives from problem framing through delivery, including FedRAMP continuous monitoring, control implementation, and authorization-impacting changes • Conduct and lead comprehensive security reviews and threat modeling for complex infrastructure components in the Federal environment • Set the team's approach to AI-assisted security engineering within a FedRAMP-authorized environment • Serve as an authoritative technical voice across engineering, compliance, and senior leadership, translating architectural tradeoffs and FedRAMP control implications into clear decisions • Partner on technical planning, prioritization, and roadmap development for Public Sector infrastructure security • Mentor and develop engineers on the team • Fulfill the Product Security Division Mission of securing GitLab Infrastructure with GitLab's own product ("dogfooding")

🎯 Requirements

• Proof of U.S. citizenship and U.S. residency • Expert knowledge of security for cloud infrastructure (AWS/GCP/Azure), container orchestration (Kubernetes) and related infrastructure and data security topics • Deep working knowledge of FedRAMP (Moderate and/or High) and the operational realities of running and continuously monitoring an authorized environment • Familiarity with NIST 800-53, FIPS 140-2/3, ISO 27001, SOC 2, PCI-DSS • Proficiency in multiple programming languages (Go, Python, Ruby) with a track record of delivering production-quality security tooling • Extensive experience with Infrastructure-as-Code security (Terraform, Ansible, CloudFormation), policy-as-code, and automated compliance, particularly in support of regulated environments • Hands-on experience applying AI to security workflows, with a point of view on where it creates meaningful leverage in compliance-constrained environments • Track record of leading multi-team technical initiatives from ambiguous problem statements to measurable outcomes, setting technical direction that peer teams adopt • Strong written and verbal communication skills, able to explain security and compliance tradeoffs to technical and non-technical audiences, including senior leadership and assessors • Share GitLab's values, and work in accordance with those values

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave