HHiring Reality
← GitLab

Staff Security Researcher

GitLab
Location
Remote, Canada; Remote, Israel; Remote, United Kingdom; Remote, United States
Posted
15 days ago
Department
Product Security
What they actually want (must-haves)
  • 7+ years of experience in security research, penetration testing, or offensive security roles
  • Hands-on experience discovering and exploiting vulnerabilities
  • Be a subject matter expert (SME) of at least two technical areas impacting the security of the product
  • Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust
  • Ability to read and analyze code across multiple languages and codebases
  • Understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation
Nice to have
  • Published security research or conference presentations
  • Background in software engineering with distributed systems expertise
  • Security certifications such as OSCP, OSCE, GPEN, or similar
  • Experience with GitLab or similar DevSecOps platforms
What the job really is

As a Staff Security Research Engineer at GitLab, you will conduct advanced security research focused on the company's AI-powered DevSecOps capabilities. Your responsibilities will include identifying and validating vulnerabilities, developing testing methodologies, and translating emerging threats into actionable security improvements. You will work closely with engineering teams to enhance security practices and contribute to the development of secure software tools.

Benefits
  • Flexible Paid Time Off
  • Team Member Resource Groups
  • Equity Compensation & Employee Stock Purchase Plan
  • Growth and Development Fund
  • Parental Leave
Things to weigh
  • No salary listed for locations outside the United States
  • Role involves cutting-edge security research in AI, which may require continuous learning and adaptation
  • Position requires collaboration with engineering teams, which may involve navigating complex technical discussions
Job score3.4/5
Benefits3/5
Freshness4/5
Career value5/5
Role clarity5/5
Pay transparency0/5

Applying to GitLab?

See how your résumé matches this role — and tailor it from what actually gets interviews.