Remote opportunity at
GitLabPrincipal Field Security Engineer (US)
GitLab is seeking a Principal Field Security Engineer to join its Security Governance team. The platform operates as an intelligent orchestration tool for DevSecOps, helping organizations…
Career Tools
About This Role
GitLab is seeking a Principal Field Security Engineer to join its Security Governance team. The platform operates as an intelligent orchestration tool for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security and compliance risks. More than half of Fortune 100 companies and over 50 million registered users rely on the software. In this position, you will act as a primary security expert supporting the sales and…
Job Description
GitLab is seeking a Principal Field Security Engineer to join its Security Governance team. The platform operates as an intelligent orchestration tool for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security and compliance risks. More than half of Fortune 100 companies and over 50 million registered users rely on the software.
In this position, you will act as a primary security expert supporting the sales and field organizations. You will guide enterprise clients through complex security architecture hurdles, review contracts and vendor agreements, handle escalated security questionnaires and risk assessments, and collaborate with Legal, Sales, Product, and Procurement departments to address regulatory and compliance needs. You will also create educational resources, manage the company Trust Center, and represent security practices to the industry.
This is a full-time, remote position based in the United States, offering a salary range of USD 203,200 to 285,000 per year, with eligible sales incentive pay targeted at up to 100% of the base salary. Candidates must be United States citizens due to government requirements.
Responsibilities
- Act as the primary security contact for enterprise customer questions, requests, and concerns
- Join client and prospect meetings to discuss security practices, privacy, and compliance requirements
- Create and maintain negotiation playbooks, templates, training materials, and fallback positions
- Provide escalation support for complex RFPs, security questionnaires, and risk assessments
- Review customer agreements and vendor contracts for security and compliance clauses
- Partner with Legal, Sales, Product, and Procurement teams to negotiate contract terms and track security obligations
- Develop internal and external security content such as whitepapers, blog posts, and sales enablement training
- Manage and improve the company Trust Center and self-service security resources
- Participate in Quarterly Business Reviews to inform security and product roadmaps
- Mentor team members and drive continuous improvement of field security processes
Requirements
- 10 or more years of background in information security
- At least 5 years of experience in customer-facing security roles
- Deep expertise in security standards and frameworks like SOC 2, ISO series, FedRAMP, and NIST CSF
- Familiarity with laws and regulations including GDPR, CCPA, DORA, and the EU AI Act
- Demonstrated background in contract negotiation and privacy or security agreement reviews
- Strong verbal and written communication skills for explaining technical concepts to various audiences
- Understanding of cloud security, DevSecOps practices, and SaaS security models
- United States citizenship due to government requirements
Qualifications
- Possession of relevant certifications such as CISSP, CISA, CISM, CCSP, CIPP/CIPM, or ISO 27001 Lead Implementer/Auditor
- Prior experience speaking at conferences
Core Skills
Benefits
- Flexible paid time off
- Team member resource groups
- Equity compensation and employee stock purchase plan
- Growth and development fund
- Parental leave
- Incentive pay targeted at up to 100% of the offered base salary
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote role?
Yes, GitLab operates on a remote-first model for this position, though applicants must be United States citizens due to government requirements.
What is the salary range for the Principal Field Security Engineer?
The base salary range for United States residents is USD 203,200 to 285,000 per year. Additionally, sales roles are eligible for incentive pay targeted at up to 100% of the offered base salary.
What experience is required to apply?
Applicants need at least 10 years of information security experience, with a minimum of 5 years in customer-facing security positions, alongside expertise in security frameworks, regulations, and contract negotiations.
What benefits are provided?
GitLab offers flexible paid time off, equity compensation, an employee stock purchase plan, parental leave, a growth and development fund, and team member resource groups.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.