Senior Software Engineer, Security Factory: Code Security
Core
Build GitLab's code-level security scanning capabilities, including dependency analysis, vulnerability detection using hybrid AI/rule-based analyzers, and automated remediation services.
Role type
Senior Backend Engineer (Security Factory: Code Security)
Builds
Security analysis engines, dependency parsing tools, automated merge requests for vulnerable dependencies, and AI-driven detection analyzers.
Domain
Software Security / DevSecOps / AI-assisted Development
Deliverable
production ML models
Required skills
Go, Rust, LLM tooling, package managers (npm, Maven, pip, Bundler, Cargo), application security, vulnerability research, secure code review, software supply chain knowledge
Preferred skills
AI-driven detection evaluation, performance optimization at scale, program analysis (parsing, ASTs, data-flow), containerized workflows, CI/CD
Technologies
Go, Rust, Ruby, Python, Docker, npm, Maven, pip, Bundler, Cargo, GitLab CI/CD
Responsibilities
Design and ship analyzers pairing deterministic and AI-driven analysis; build evaluation harnesses for false positives and missed findings; extend manifest, lockfile, and SBOM parsing; ship features for automated remediation service; solve high-scope technical problems; mentor Intermediate engineers; participate in on-call rotations.
Seniority
Senior, hands-on IC
