Architectural Direction

• Drive key architectural decisions, particularly for:
  • AI and machine learning detection engines
  • Agentic remediation flows
  • Scalable scanning infrastructure

Collaboration & Delivery

• Partner with product management to align priorities, shape requirements, and deliver security capabilities for regulated and high-security customer environments
• Own engineering delivery of:
  • Proprietary application security scanners
  • Agentic remediation workflows
  • AI Security Research efforts

Representation & Alignment

• Serve as the ** voice of Security Factory** in:
  • Cross-functional planning
  • Executive reviews
  • Security disclosures
  • Customer conversations

Standards & Transparency

• Establish engineering standards for:
  • Delivery & delivery efficiency
  • Observability
  • Incident response
  • Scanner quality
  • Code quality
• Align with GitLab’s async-first, transparent workflow through tools like:
  • Issues
  • Merge requests
  • The GitLab handbook

What You’ll Bring

Leadership & Management

• Proven experience leading engineering organisations that comprise multiple teams and managers in a distributed environment

Technical Expertise

• Strong understanding of application security fundamentals including:
  • Static Application Security Testing (SAST)
  • Software Composition Analysis (SCA)
  • Secret detection
  • Vulnerability management workflows
  • Software supply chain security

Product & Systems Knowledge

• Experience building detection, analysis, or scanning systems in a:
  • Software as a Service (SaaS)
  • DevSecOps environment
• Familiarity with trade-offs in:
  • Precision vs. recall
  • Latency
  • Scalability

AI & Machine Learning Background

• Direct experience shipping customer-facing AI/ML product features tied to:
  • Detection quality
  • Remediation outcomes

Product Collaboration

• Ability to partner closely with product management for:
  • Roadmap planning
  • Prioritisation
  • Requirements (within product-led environments)

Communication

• Strong written communication skills appropriate for:
  • Remote, async-first environments
  • Clearer documentation practices

Leadership Style

• Collaborative and coaching-focused leadership
• Ability to give direct feedback, while aligning with GitLab’s:
  • Core values
  • Operating principles

Experience with preferred technologies

• Familiarity with (or passion for) agentic AI systems, AI agent orchestration, threat intelligence research, and open-source security tooling

About the Team

The Security Factory group builds GitLab’s customer-facing security capabilities within its AI-powered DevSecOps platform. The organisation spans nine teams, delivering capabilities across:

• Proprietary scanners (incl. SAST, SCA, secret detection etc.)
• AI-driven detection engines
• Agentic remediation branches
• Security research
• Vulnerability management
• Core security infrastructure

Teams operate asynchronously, collaborating across regions with product management and cross-functional stakeholders. The mission is to:

• Improve detection quality
• Scale security workflows for enterprise use
• Strengthen GitLab’s contributions to securing the software supply chain

For more about the team’s approach, consult the [Sec Engineering Handbook](link included in original text).

How GitLab Supports Full-Time Employees

GitLab offers comprehensive benefits to support:

Health, Wellbeing & Financial Stability

• Benefits catering to health, finances, and day-to-day well-being
• Flexible Paid Time Off (PTO)

Professional Development

• Team Member Resource Groups (TMRGs) to foster community
• Growth and Development Fund for extensive upskilling

Equity & Compensation

• Equity compensation and Employee Stock Purchase Plan

Work-Life Balance

• Family-friendly policies, including parental leave

GitLab is committed to inclusive hiring, encouraging candidates with varied experience levels to apply even if not all qualifications are met. Candidates from underrepresented groups are strongly encouraged to apply.

For hiring guidelines and location considerations: Roles are globally remote, though some may have country-specific eligibility requirements. Our Talent Acquisition team can address any questions during the application process.

GitLab’s commitment to equality: We reserve the right to extend this opportunity to underrepresented positions, re-Christianise our “At-Will Employment” policies, and improve physical/disability accessibility via accommodations during recruitment.

Legal agreements: Privacy protection is prioritised. Refer to [GitLab’s Recruitment Privacy Policy](link included).

GitLab stands proud as an equal opportunity employer. Our employment, career development, advancement and retirement policies adhere strictly to merit – regardless of sex, origin, religion, veteran status, disability or any other basis protected by law. GitLab values harassment- and discrimination-free environments. For more: GitLab’s EEO Policy and EEO is the Law.

Accessibility for candidates during recruitment: If you have a disability or special need requiring accommodation, please inform us during the application process.