Intermediate Backend Engineer , Security Factory
Core
Build and extend GitLab's static analysis engine (SAST) using AI agents to help developers find and fix security issues in code.
Role type
Intermediate IC backend engineer (security static analysis)
Builds
Static analysis engine, AI-assisted tooling, and SAST rules for customer software repositories
Domain
DevSecOps, Static Application Security Testing (SAST), AI/LLM integration
Deliverable
production ML models
Required skills
Rust, Go, static analysis, parsing, symbol resolution, call graphs, taint/data-flow analysis, AI/LLM tool usage, code review
Preferred skills
performance optimization, Docker, CI/CD, mutation testing, fuzzing, program analysis research
Technologies
Rust, Go, Ruby, LLMs, AI agents
Responsibilities
Extend program model for new languages/frameworks; build AI-assisted tooling to validate engine changes; develop SAST rules mapped to CWE/OWASP; implement component specifications with AI agents; improve harness and agent instructions; troubleshoot product/security operations
Seniority
Intermediate, hands-on IC
