Opportunity at
GitLabIntermediate Backend Engineer , Security Factory
GitLab is seeking an Intermediate Backend Engineer to join its Security Factory: Code Scanning team in India. GitLab develops an intelligent orchestration platform for DevSecOps, utilized…
Career Tools
About This Role
GitLab is seeking an Intermediate Backend Engineer to join its Security Factory: Code Scanning team in India. GitLab develops an intelligent orchestration platform for DevSecOps, utilized by over fifty million registered users and more than fifty percent of the Fortune 100. In this role, you will contribute to the static analysis engine that helps developers identify and resolve security vulnerabilities within their source code. Your daily responsibilities will involve expanding…
Job Description
GitLab is seeking an Intermediate Backend Engineer to join its Security Factory: Code Scanning team in India. GitLab develops an intelligent orchestration platform for DevSecOps, utilized by over fifty million registered users and more than fifty percent of the Fortune 100.
In this role, you will contribute to the static analysis engine that helps developers identify and resolve security vulnerabilities within their source code. Your daily responsibilities will involve expanding program models, incorporating artificial intelligence agents that generate and review code under human guidance, and building testing tools to measure detection accuracy against benchmark applications. Team members at GitLab incorporate artificial intelligence into their routine tasks as a productivity multiplier.
This position is suited for professionals with production coding experience in systems languages who want to work on static analysis and application security. The company operates in a largely asynchronous environment. GitLab is an equal opportunity employer that evaluates candidates on merit without regard to protected characteristics.
Responsibilities
- Extend program models by handling parsing, symbol resolution, intermediate representations, call graphs, and taint and data-flow analysis to support new languages and frameworks
- Build and apply AI-assisted tooling to implement, review, and validate engine changes and findings alongside technical leadership
- Evaluate detection quality against known vulnerabilities by measuring false positive and false negative rates
- Develop static application security testing rules mapped to Common Weakness Enumeration and OWASP standards, alongside test fixtures
- Execute component specifications using phased plans and small, reviewable changes in coordination with engineers and AI agents
- Maintain synchronization between specifications and codebase
- Enhance the testing harness, agent instructions, and skills to ensure trustworthiness of agent-written code through separate coding and reviewing agents, performance checks, and API checks
- Resolve technical challenges of moderate scope and complexity while addressing technical debt
- Write maintainable code adhering to internal standards and participate in code reviews
- Take part in on-call rotations to support product operations, security operations, and urgent engineering tasks
Requirements
- Experience using AI or large language model tools to generate or evaluate technical content with the judgment to assess output trustworthiness
- Solid professional experience writing and testing production code in a systems language, specifically Rust or Go
- Willingness to work across multiple languages including Rust, Go, and Ruby
- Interest in static analysis and application security concepts
- Ability to organize and progress work independently in a largely asynchronous environment
- Capacity to communicate technical problems clearly and concisely while proposing iterative solutions
Qualifications
- Experience with performance optimization
- Familiarity with Docker and continuous integration and continuous delivery workflows
- Background in web or mobile frameworks
- Knowledge of guardrails for agent-written code such as mutation testing and fuzzing
- Prior involvement in program analysis and security research through publications or open source contributions
Core Skills
Benefits
- Flexible paid time off
- Team member resource groups
- Equity compensation and employee stock purchase plan
- Growth and development fund
- Parental leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
This is a full-time position.
What is the remote work policy for this position?
The posting specifies an India location and states that all GitLab roles are remote, though specific location-based eligibility requirements may apply.
What programming languages are used in this role?
The analysis engine is written in Rust, the analyzer wrapper uses Go, and the monolith integration uses Ruby.
What is the salary for this position?
The posting does not specify the salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.