
Opportunity at
GitLabIntermediate Security Engineer, Security Incident Response Team (SIRT)
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, minimize compliance risks, and speed up digital transformation. Over fifty…
Career Tools
About This Role
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, minimize compliance risks, and speed up digital transformation. Over fifty million registered users rely on the platform to ship secure software more rapidly. As an Intermediate Security Engineer focusing on the Security Incident Response Team (SIRT), you will defend both the enterprise and GitLab.com from emerging security threats. This full-time position utilizes a compressed…
Job Description
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, minimize compliance risks, and speed up digital transformation. Over fifty million registered users rely on the platform to ship secure software more rapidly.
As an Intermediate Security Engineer focusing on the Security Incident Response Team (SIRT), you will defend both the enterprise and GitLab.com from emerging security threats. This full-time position utilizes a compressed four-day work schedule running Sunday through Wednesday to maintain continuous coverage. Operating in high-pressure scenarios, you will monitor threats, investigate potential incidents, and utilize automation tooling to resolve events.
This opportunity suits professionals eager to expand their incident response capabilities within a structured security framework. Team members incorporate artificial intelligence into daily workflows and collaborate globally across regions.
Responsibilities
- Manage security incident response within a global rotation, overseeing events from initial detection through containment and recovery
- Produce and update documentation such as standard operating procedures and runbooks
- Execute post-incident root cause analysis and lessons-learned reviews to strengthen defense programs
- Create and deploy automated security workflows to minimize manual tasks and boost operational efficiency
- Identify security vulnerabilities and build advanced detection capabilities
- Partner with internal teams to build new security functions and deliver technical projects
Requirements
- Demonstrated ability to learn and independently lead incident response processes
- Experience using security logging tools or SIEM systems
- Working knowledge of cloud environments like AWS or GCP
- Python coding experience or a strong willingness to learn the language
- Proactive mindset regarding threat investigation
Qualifications
- Interest in performing forensic analyses on compromised hosts
- Prior background or strong motivation to learn cloud-based security investigations
- A strong passion for technical documentation
Core Skills
Benefits
- Flexible paid time off
- Access to team member resource groups
- Equity compensation and an employee stock purchase plan
- Growth and development fund
- Parental leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the schedule for this Security Engineer role?
This position operates on a compressed four-day work schedule from Sunday through Wednesday to ensure continuous security coverage.
Are location or remote details specified for this job?
The specific office or work location is not stated in the source posting, though the employer hires globally and states that all roles are remote while maintaining possible location-based eligibility rules.
What compensation and benefits are offered?
Specific salary amounts are not specified. Benefits include flexible paid time off, equity compensation, an employee stock purchase plan, parental leave, and a growth and development fund.
Do I need to meet every single qualification to apply?
No, the employer welcomes interest from candidates with varying experience levels and notes that many successful applicants do not meet every listed requirement.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.

