Senior Backend Engineer
Core
Build core capabilities for GitLab's software supply chain security Add-On, including package policy enforcement, artifact signing, verification, and malicious package detection.
Role type
Senior IC backend engineer (Ruby on Rails)
Builds
Commercial software supply chain security features for enterprise customers
Domain
DevSecOps / Software Supply Chain Security
Deliverable
production ML models | product features
Required skills
Ruby on Rails, API design (REST, GraphQL), PostgreSQL, Redis, security-aware engineering, software supply chain security concepts (SLSA, SBOM)
Preferred skills
Go, rules engines, cryptographic signing, DevSecOps product development
Technologies
Ruby on Rails, Sigstore, Cosign, OpenID Connect, GraphQL, RSpec, PostgreSQL, Redis
Responsibilities
Design and implement backend features for policy enforcement and artifact signing; Build and improve the package policy evaluation engine; Develop artifact signing workflows with keyless signing; Create and evolve configuration interfaces for security teams; Integrate capabilities with existing security policy frameworks; Write and maintain comprehensive test coverage.
Seniority
Senior, hands-on IC
