Remote opportunity at
GitLabSenior Security Engineer, Incident Response Team (Australia)
GitLab operates an intelligent DevSecOps platform used by millions of registered users and major organizations to build secure software quickly. The company is currently hiring a…
Career Tools
About This Role
GitLab operates an intelligent DevSecOps platform used by millions of registered users and major organizations to build secure software quickly. The company is currently hiring a Senior Security Engineer to join its Security Incident Response Team (SIRT) with a focus on Australia. Operating within a 24/7 global structure that follows a follow-the-sun model, this remote position covers the APAC window and requires participation in a rotating on-call schedule. In this…
Job Description
GitLab operates an intelligent DevSecOps platform used by millions of registered users and major organizations to build secure software quickly. The company is currently hiring a Senior Security Engineer to join its Security Incident Response Team (SIRT) with a focus on Australia. Operating within a 24/7 global structure that follows a follow-the-sun model, this remote position covers the APAC window and requires participation in a rotating on-call schedule.
In this capacity, you will serve on the frontline to protect both corporate environments and GitLab.com from digital threats. The role involves managing high-severity security events from initial detection through triage, containment, eradication, and recovery. You will handle complex cloud investigations using Digital Forensics and Incident Response methodologies, prepare executive communications for stakeholders, and conduct post-incident reviews including root cause analysis.
This position is well-suited for an engineering professional who excels in fast-paced environments, possesses deep DFIR expertise, and is enthusiastic about building automated systems and AI-driven workflows. You will collaborate closely with various internal groups such as Detection Engineering, Threat Intelligence, Infrastructure, and Legal to enhance overall defense capabilities and scale security operations.
Responsibilities
- Manage end-to-end incident response for high-severity security events during the APAC coverage window
- Participate in a rotating on-call schedule as part of the 24/7 global follow-the-sun operational model
- Investigate sophisticated security incidents across cloud platforms using digital forensics and incident response techniques
- Draft clear executive updates to keep stakeholders informed during active security events
- Collaborate with Detection Engineering to create SIEM use cases, alert strategies, and telemetry pipelines
- Develop automation and AI-assisted workflows to boost triage speed and response consistency
- Work alongside Threat Intelligence to analyze adversary tactics and improve threat coverage
- Perform root cause analysis and lead post-incident reviews to minimize future risk
- Create and maintain operational runbooks, playbooks, and documentation
- Partner with cross-functional departments including Engineering, Infrastructure, Product, and Legal, while mentoring other engineers
Requirements
- Demonstrated background in security incident response and investigations within cloud-first environments
- Practical background using or administering Git or GitLab from an engineering or security standpoint
- Direct experience utilizing SIEM, EDR, or detection engineering tools
- Familiarity with cloud platforms including AWS and GCP
- Knowledge of threat intelligence frameworks and adversary tactics such as MITRE ATT&CK
- Experience developing or working with automation tools, scripting languages like Python, or SOAR platforms
- Strong problem-solving abilities and effective performance during high-severity incidents
- Strong written communication skills for producing clear operational documentation
Qualifications
- Interest or prior experience applying artificial intelligence, machine learning, or data-driven methods to triage, detection, or response workflows
- Growth mindset coupled with a proactive approach to discovering and mitigating security vulnerabilities
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the location and remote status of this job?
The position is remote and based in Australia, operating within a global team structure that covers the APAC region.
What is the employment type?
This is a full-time position.
What salary does this role offer?
The source posting does not specify a salary for this position.
Does the role require on-call duties?
Yes, this position covers the APAC window within a 24/7 follow-the-sun model and includes participation in a rotating on-call schedule.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.