Remote opportunity at
GitLabPrincipal Security Researcher
GitLab operates an intelligent orchestration platform for DevSecOps, aiding organizations in boosting developer efficiency, enhancing operational performance, minimizing compliance risk, and streamlining digital transformation. The platform…
Career Tools
About This Role
GitLab operates an intelligent orchestration platform for DevSecOps, aiding organizations in boosting developer efficiency, enhancing operational performance, minimizing compliance risk, and streamlining digital transformation. The platform supports millions of registered users and numerous major enterprises in delivering secure software rapidly. Within this environment, the Application Security Team seeks a Principal Security Researcher to investigate cutting-edge security mechanisms across artificial intelligence capabilities and agentic surfaces. This position reports to the Senior…
Job Description
GitLab operates an intelligent orchestration platform for DevSecOps, aiding organizations in boosting developer efficiency, enhancing operational performance, minimizing compliance risk, and streamlining digital transformation. The platform supports millions of registered users and numerous major enterprises in delivering secure software rapidly. Within this environment, the Application Security Team seeks a Principal Security Researcher to investigate cutting-edge security mechanisms across artificial intelligence capabilities and agentic surfaces.
This position reports to the Senior Manager of Application Security. The professional in this function will spearhead security research initiatives, build automation tools, analyze open-source components, and establish technical requirements to safeguard the platform. Ideal candidates possess extensive offensive security expertise, programming proficiency, and a strong understanding of artificial intelligence attack vectors. The team incorporates artificial intelligence into daily workflows and values continuous knowledge exchange and high performance.
United States residents may receive a base salary between $203,200 and $275,000 per year, determined by qualifications, location, and market alignment. Full-time personnel obtain equity compensation, an employee stock purchase plan, flexible paid time off, parental leave, a growth and development fund, and health and financial support benefits.
Responsibilities
- Conduct and lead security research projects across multiple functional areas.
- Identify novel, systemic, and chained vulnerabilities within the platform.
- Validate security flaws through practical testing and construct proof-of-concept exploits.
- Examine emerging industry vulnerability classes against the codebase and drive systemic remediation.
- Lead investigations into artificial intelligence and agentic surfaces to define security requirements.
- Build and direct tooling and automation for scalable vulnerability discovery.
- Examine the security posture of open-source tools and dependencies, reporting findings to maintainers.
- Contribute to team and sub-department roadmaps while integrating research results into business functions.
- Mentor domain experts and individual contributors across various teams.
- Share knowledge and novel vulnerability types with the wider security community.
Requirements
- Ten or more years of experience in security research, penetration testing, or offensive security roles.
- Strong ability in discovering and exploiting vulnerabilities within large codebases and complex systems.
- Proficiency in at least two of Ruby, Go, Python, TypeScript, or Rust.
- Ability to read and analyze code across multiple languages and codebases.
- Strong knowledge of artificial intelligence frameworks.
- Strong understanding of artificial intelligence attack vectors including prompt injection, agent manipulation, and workflow exploitation.
- Ability to establish and drive complex remediation initiatives involving cross-functional teams.
- Excellent written communication skills with the ability to articulate complex topics clearly.
- Ability to translate technical findings into risk assessments and remediation recommendations.
- Strong analytical, problem-solving, and creative thinking skills regarding attack scenarios.
Qualifications
- Published security research or conference presentations.
- Background in software engineering with distributed systems expertise.
- Experience with GitLab or similar DevSecOps platforms.
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
- Benefits supporting health, finances, and well-being
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, GitLab roles are remote, although certain positions may carry specific location-based eligibility requirements.
What is the salary range for this role?
For residents of the United States, the base salary range is $203,200 to $275,000 per year, exclusive of bonuses, equity, and benefits.
What level of experience is required?
Candidates must have 10 or more years of experience in security research, penetration testing, or offensive security roles.
What benefits are provided for full-time employees?
GitLab offers flexible paid time off, equity compensation, an employee stock purchase plan, a growth and development fund, parental leave, and health and financial support benefits.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
