Staff Security Researcher

🕒 September 5

🌐 United States, Canada, +2 more countries – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote 🇮🇱 Israel – Remote 🇬🇧 United Kingdom – Remote

💵 $168k - $238k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Conduct security research in two or more specialty areas • Identify novel, systemic, and chained vulnerabilities in GitLab • Validate vulnerabilities through hands-on testing and proof-of-concept exploits • Assess emerging vulnerability classes against the GitLab codebase and drive remediation • Research GitLab's AI and agentic surfaces and help define security requirements • Build tooling and automation for scalable security research, including agent-assisted vulnerability discovery • Research the security posture of open source tools and dependencies, report findings to maintainers, and track mitigation • Solve technical problems of high scope, complexity, and ambiguity • Define and implement security technical and process improvements • Contribute to the team roadmap • Provide actionable feedback to engineering teams • Mentor and advise individual contributors • Share knowledge and novel vulnerability types with the security community • Report to the Senior Manager of Application Security

🎯 Requirements

• 7+ years of experience in security research, penetration testing, or offensive security roles • Hands-on experience discovering and exploiting vulnerabilities • Subject matter expertise in at least two technical areas impacting product security • Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust • Ability to read and analyze code across multiple languages and codebases • Understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation • Experience leading technical objectives in cross-functional teams • Excellent written communication skills with ability to articulate complex topics clearly and concisely • Ability to translate complex technical findings into clear risk assessments and remediation recommendations • Strong analytical and problem-solving skills with creative thinking about attack scenarios • Published security research or conference presentations (nice to have) • Background in software engineering with distributed systems expertise (nice to have) • Security certifications such as OSCP, OSCE, GPEN, or similar (nice to have) • Experience with GitLab or similar DevSecOps platforms (nice to have)

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave