Opportunity at
GitLabIntermediate Backend Engineer - Code Security
GitLab operates an intelligent orchestration platform for DevSecOps, assisting organizations in boosting developer productivity, enhancing operational efficiency, minimizing security and compliance risks, and accelerating digital transformation.…
Career Tools
About This Role
GitLab operates an intelligent orchestration platform for DevSecOps, assisting organizations in boosting developer productivity, enhancing operational efficiency, minimizing security and compliance risks, and accelerating digital transformation. The company seeks an Intermediate Backend Engineer to join the Security Factory: Code Security team based in India. In this capacity, you will assist developers in discovering and fixing security vulnerabilities within custom code and open source dependencies by bridging dependency analysis, vulnerability detection,…
Job Description
GitLab operates an intelligent orchestration platform for DevSecOps, assisting organizations in boosting developer productivity, enhancing operational efficiency, minimizing security and compliance risks, and accelerating digital transformation. The company seeks an Intermediate Backend Engineer to join the Security Factory: Code Security team based in India. In this capacity, you will assist developers in discovering and fixing security vulnerabilities within custom code and open source dependencies by bridging dependency analysis, vulnerability detection, and automated remediation. Your daily tasks will involve parsing dependency manifests and lockfiles, expanding service capabilities for advisory-driven merge requests, and building hybrid analyzers that merge deterministic rule-based detection with artificial intelligence reasoning. GitLab expects team members to incorporate AI into daily workflows. The position suits individuals capable of working independently in an asynchronous environment while communicating technical solutions clearly. Candidates will participate in on-call rotations to manage urgent engineering problems and operational support.
Responsibilities
- Develop secure, performant parsing for dependency manifests, lockfiles, and software bills of materials
- Extend analysis engine and remediation service support for new package ecosystems and formats
- Build and apply analyzers combining deterministic and AI-driven analysis
- Create detection rules mapped to Common Weakness Enumeration alongside test fixtures
- Package analyzers for continuous integration jobs, AI workflows, and command-line tools
- Extend automated remediation services from sandbox dependency updates to opening merge requests
- Identify and resolve technical debt while writing maintainable code meeting internal standards
- Participate in on-call rotations to handle product operations, security tasks, and urgent issues
Requirements
- Experience using AI or large language model tools to generate or evaluate technical content
- Professional experience writing and testing production code in systems languages like Go or Rust
- Willingness to work across multiple languages including Ruby and Python
- Desire to learn how code and software supply chain vulnerabilities arise
- Ability to organize work independently in an asynchronous environment
Qualifications
- Experience with containerized workflows
- Familiarity with continuous integration and continuous delivery or a willingness to learn them
- Experience with package managers and dependency tooling such as npm, Maven, pip, Bundler, or Cargo
- Knowledge of web or mobile frameworks
- Background in parsing, abstract syntax trees, program analysis, or detection rules
- Experience evaluating AI-driven detection against labeled data
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the location and remote policy for this role?
The job posting indicates the location is India and notes the role is on-site.
What is the employment type?
The position is full-time.
What is the salary range for this position?
The salary is not stated in the job posting.
What programming languages are used in this role?
The team primarily uses Go and Rust for production code, along with Ruby for remediation and Python for certain analyzers.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.