Intermediate Security Engineer, Security Incident Response Team (SIRT)

View Company

Role Snapshot

Hiring Now

Work arrangement: Remote
Where applicants may be: Applicants in Australia only
Salary: Not specified
Apply by: Not specified
Employment type: Full-time
Experience: Not specified

Added to Jobsiz2h agoEmployer posted Oct 26, 2026

Listing Views0

Applications0

Apply BeforeNo deadline

Career Tools

About This Role

GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, minimize security and compliance risks, and accelerate digital transformation. The company is currently hiring an Intermediate Security Engineer to join its Security Incident Response Team (SIRT). In this remote position, the engineer helps protect both GitLab.com and the corporate entity from various security threats. The role follows a compressed four-day work schedule, with shifts…

Job Description

In this remote position, the engineer helps protect both GitLab.com and the corporate entity from various security threats. The role follows a compressed four-day work schedule, with shifts running Sunday through Wednesday to ensure round-the-clock security coverage. Primary responsibilities include managing security incidents during assigned shifts, utilizing automation tools to investigate and resolve security events, and helping enhance overall detection and response capabilities.

This opportunity is well-suited for professionals looking to expand their incident response competencies within a structured security framework, gaining hands-on experience handling real-world threats while thinking both tactically and strategically. Successful candidates thrive in high-pressure settings, remain calm under pressure, and follow established runbooks.

Responsibilities

Manage security incidents from initial detection through containment and recovery during global 24/7 rotation shifts
Produce and update documentation such as standard operating procedures and incident response runbooks
Perform root cause analysis and post-incident reviews to strengthen the security program
Build and deploy automated security processes to maximize operational efficiency
Identify security gaps and implement advanced response and detection capabilities
Partner with other teams across GitLab to build new security features and technical infrastructure projects

Requirements

Demonstrated capability to learn and independently lead incident response procedures
Familiarity with security logging tools and SIEM platforms
Working knowledge of cloud platforms such as AWS and GCP
Python programming background or a strong willingness to learn
Strong enthusiasm for creating technical documentation
Proactive mindset regarding threat investigation and detection

Qualifications

Interest in performing forensic investigations on infected hosts
Prior experience or high motivation to learn cloud-based security investigations

Core Skills

React Python AWS Git Recruitment

Benefits

Flexible paid time off
Team Member Resource Groups
Equity compensation and employee stock purchase plan
Growth and development fund
Parental leave

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Is this a remote position?

Yes, all GitLab roles are remote, though some positions may carry specific location-based eligibility requirements.

What is the work schedule for this role?

The position operates on a compressed four-day work schedule with shifts running Sunday through Wednesday to provide continuous 24/7/365 security coverage.

What is the employment type?

The posting specifies that this is a full-time position.

What salary does GitLab offer for this role?

The provided job posting does not specify a salary.