About the Role
GitLab is the open core DevSecOps platform. As a Principal Security Engineer, you will drive threat modeling, secure code audits, and zero-trust architecture across all GitLab products.
Key Responsibilities
- Lead static and dynamic analysis (SAST/DAST) initiatives across our massive Rails & Go codebase.
- Perform deep dive threat models on new features and architectural proposals.
- Triage bug bounty submissions on HackerOne and lead critical vulnerability responses.
Requirements
- 7+ years in application security, penetration testing, or software vulnerability research.
- Strong programming capability in Ruby, Go, or Python.
- Experience securing distributed multi-tenant SaaS environments.