Staff Product Security Architect
Remote in CanadaGitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.
Candidates need deep application security architecture experience, including authentication, authorization and trust boundaries, plus experience securing distributed systems and working knowledge of software supply chain security. Strong written communication, the ability to influence engineering leaders and a view on security guidance for AI coding tools are also required.
GitLab
Senior Security Risk Engineer
Remote in CanadaGitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.
5+ YOECandidates need 5+ years in security risk management with frameworks such as NIST RMF, NIST 800-39 or ISO 31000, and a track record of building automation or scripts. They also need strong written and verbal communication, cloud and SaaS security knowledge, and DevSecOps understanding. CISSP, CISM, CISA or CRISC are preferred.
GitLab, Reporting, Prioritization, Leadership, Risk management, Regulatory compliance
Senior Professional Services Technical Architect - Security
Remote in CanadaGitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.
Candidates need experience delivering secure enterprise architectures, migrating CI/CD and application security tooling, and integrating security controls into pipelines. Knowledge of frameworks like ISO 27001, NIST 800-53, SOC 2 and FedRAMP, plus Terraform, Ansible and GitLab security scanners, is expected.
GitLab, Jenkins, Snyk, Checkmarx, Veracode, SonarQube
Principal Security Researcher
Remote in CanadaGitLab: GitLab Duo Agent Platform provides AI agents that automate tasks across the software lifecycle.
10+ YOECandidates need 10+ years of security research, penetration testing, or offensive security experience, and proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust. They also need strong knowledge of AI frameworks and AI attack vectors such as prompt injection, plus clear written communication skills.
GitLab, GitLab Duo, Duo Agent Platform