HHiring Reality
← GitLab

Principal Security Researcher

GitLab
Location
Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States
Posted
15 days ago
Department
Product Security
What they actually want (must-haves)
  • 10+ years of experience in security research, penetration testing, or offensive security roles
  • Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems
  • Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust
  • Ability to read and analyze code across multiple languages and codebases
  • Strong knowledge of AI frameworks
  • Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation
Nice to have
  • Published security research or conference presentations
  • Background in software engineering with distributed systems expertise
  • Experience with GitLab or similar DevSecOps platforms
What the job really is

The Principal Security Researcher at GitLab will lead security research projects focused on identifying and validating vulnerabilities in GitLab's AI-powered DevSecOps capabilities. This role involves developing testing methodologies, conducting penetration testing, and translating emerging threats into actionable security improvements. The researcher will also mentor others, shape security practices, and work with engineering teams to enhance the security of GitLab's platform.

Benefits
  • Flexible Paid Time Off
  • Team Member Resource Groups
  • Equity Compensation & Employee Stock Purchase Plan
  • Growth and Development Fund
  • Parental Leave
Things to weigh
  • No salary listed for locations outside the United States
  • The role involves working with cutting-edge AI systems, which may involve a steep learning curve for those unfamiliar with AI security
  • The position requires a high level of experience, which may deter less experienced candidates from applying
Job score3.4/5
Benefits3/5
Freshness4/5
Career value5/5
Role clarity5/5
Pay transparency0/5

Applying to GitLab?

See how your résumé matches this role — and tailor it from what actually gets interviews.