Intermediate Security Analyst, Vulnerability Operations (North America)
Core
Triage security reports, manage vulnerability operations, and coordinate communications for GitLab's Product Security Vulnerability Operations team.
Role type
Intermediate IC security analyst (vulnerability operations)
Builds
Secure software products for GitLab customers
Domain
Cybersecurity / DevSecOps
Required skills
vulnerability triage, severity assessment (CVE/CVSS/CWE/OWASP), bug bounty platform experience, technical documentation, stakeholder communication
Preferred skills
scripting, log analysis, issue tracking, data analysis
Technologies
HackerOne, Bugcrowd, CVE databases
Responsibilities
Review and validate bug bounty reports, track vulnerabilities through remediation, reproduce issues with engineering teams, draft customer-facing security communications, maintain issue records and operational metrics, create runbooks and procedures
Seniority
Intermediate, hands-on IC
