Search Remote Jobs

Staff Product Security Architect

🕒 September 25

🌐 United States, Canada, +3 more countries – Remote

infoinfo

💵 $168k - $238k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on GitLab's careers page, not through a job board

First seen by Remote Rocketship September 25

Still open on GitLab's site. Checked 6 hours ago.

Logo of GitLab

GitLab

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Partner with engineering and product leadership across GitLab to anticipate security problems • Lead security architecture and design work for strategic initiatives and direct cross-functional delivery teams • Identify, assess, and prioritize systemic security risks • Act as Security Owner for high-priority Product Security Risk Register items and co-execute remediation • Codify security decisions into reusable guardrails, standards, design patterns, skills, and threat models for developer and AI coding workflows • Build proofs of concept and prototypes to unblock engineering teams • Conduct security architecture reviews for large or strategic projects • Coordinate with Application Security to prioritize comprehensive review coverage • Threat model new and existing systems and establish reusable threat-modeling patterns • Work with Security Research to explore unknown architectural risks • Anticipate emerging security challenges and propose architectural responses • Mentor security engineers and represent security architecture to engineering audiences

🎯 Requirements

• Depth in application security architecture, including authentication and authorization models, privilege escalation, multi-tenant isolation, and trust boundary analysis • Experience securing distributed systems, including service-to-service authentication, secrets handling, and security decisions across process boundaries • Working knowledge of software supply chain security: build and release integrity, artifact provenance, and dependency risk • Track record of proactive architecture work identifying risk before incidents and designing preventative solutions • Ability to build trusted relationships with engineering leadership and influence technical direction through expertise • Experience defining security standards or patterns adopted by teams • Ability to operate strategically while remaining hands-on, including reading unfamiliar code, building prototypes, and contributing changes • Clear written communication and ability to make security arguments to engineering audiences • Perspective on authoring and delivering security guidance for AI coding tools • Ability to incorporate AI into daily workflows

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 September 24

Peraton

10,000+ employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Principal OT cybersecurity architect leading federal critical-infrastructure modernization for Peraton. Evaluating ICS and enterprise security solutions, vendors, and requirements.

🕒 September 24

Wiz

201 - 500

🔒 Cybersecurity

Security Engineer securing Wiz’s cloud and AI security platform, products, CI/CD, and production infrastructure. Leading threat modeling, vulnerability management, and cloud-native detection and response.

🕒 September 24

Gainwell Technologies

10,000+ employees

💼 Consulting

📦 Logistics

⚕️ Healthcare Insurance

Information Security Officer governing security operations, audits, risks, and compliance for Gainwell’s healthcare technology services. Driving remediation, incident management, and contractual security reporting.

🕒 September 23

Brown and Caldwell

1001 - 5000

💼 Consulting

🏗️ Construction

🏥 Healthcare

Cybersecurity Engineer securing OT/IT environments for Brown and Caldwell’s water and environmental infrastructure clients. Leading assessments, secure architectures, compliance, and critical infrastructure consulting.

🕒 September 23

Jones Lang LaSalle Americas, Inc.

10,000+ employees

🏠 Real Estate

🤝 B2B

💼 Consulting

Principal security engineer leading identity security, IdP, CIAM, and privileged access controls. Supporting JLL’s global real estate and investment management technology.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok