Remote opportunity at
GitLabIntermediate Security Engineer, Security Incident Response Team (SIRT)
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security and compliance risks. The company serves over 50…
Career Tools
About This Role
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security and compliance risks. The company serves over 50 million registered users, including a significant portion of Fortune 100 organizations, and integrates artificial intelligence as a core productivity tool across its daily workflows. As an Intermediate Security Engineer focusing on the Security Incident Response Team (SIRT), you serve on the frontline to protect…
Job Description
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security and compliance risks. The company serves over 50 million registered users, including a significant portion of Fortune 100 organizations, and integrates artificial intelligence as a core productivity tool across its daily workflows.
As an Intermediate Security Engineer focusing on the Security Incident Response Team (SIRT), you serve on the frontline to protect both GitLab.com and the company from potential security threats. This full-time position operates on a compressed four-day work schedule from Sunday through Wednesday, utilizing longer daily shifts to provide continuous 24/7/365 coverage. Your main objective is to detect, investigate, and resolve security incidents using automated response tooling during your assigned shifts. You will also have opportunities to build and refine security tooling to enhance detection capabilities.
This role suits professionals who thrive in high-pressure environments, can follow structured runbooks calmly, and want to balance tactical incident handling with strategic threat mitigation. Success in this position requires adopting both attacker and defender perspectives to protect user data and reinforce the company infrastructure. The globally distributed Security Operations team collaborates across regions to execute incident response, threat analysis, and engineering projects.
Responsibilities
- Manage security incidents from initial detection through containment and recovery during global rotation shifts
- Produce and update comprehensive incident response documentation including runbooks and standard operating procedures
- Perform post-incident root cause analysis and lessons-learned reviews to improve security operations
- Design and deploy automated security workflows to minimize manual tasks and increase efficiency
- Identify security gaps and implement advanced threat detection and response measures
- Partner with various internal teams to build new security capabilities and advance infrastructure projects
Requirements
- Demonstrated ability to learn and independently lead incident response processes
- Working familiarity with SIEM or security logging tools
- Prior experience operating within cloud platforms such as GCP or AWS
- Proficiency in Python programming or a strong readiness to learn it
- A strong interest in conducting forensic analysis of compromised hosts
- Experience with cloud-based security investigations or a strong desire to learn them
Qualifications
- Passion for producing clear technical documentation
- Proactive mindset regarding threat identification and investigation
Core Skills
Benefits
- Flexible paid time off
- Access to team member resource groups
- Equity compensation and an employee stock purchase plan
- Growth and development fund
- Parental leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote role?
GitLab hires new team members in countries around the world, and all roles are remote, though certain positions may carry specific location-based eligibility requirements.
What is the work schedule for this position?
This role features a compressed 4-day work schedule where a full-time week is condensed into four longer working days, with shifts running Sunday through Wednesday.
What is the salary for this role?
The provided job posting does not specify salary information.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
