Remote opportunity at
GitLabSenior Security Engineer, Security Incident Response Team (SIRT) - EMEA
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security risks. The company seeks a remote Senior Security…
Career Tools
About This Role
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security risks. The company seeks a remote Senior Security Engineer to join its Security Incident Response Team (SIRT) covering the EMEA region. This position requires working a compressed schedule consisting of four extended working days per week, with shifts falling either Sunday through Wednesday or Wednesday through Saturday to maintain continuous 24/7/365 security…
Job Description
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security risks. The company seeks a remote Senior Security Engineer to join its Security Incident Response Team (SIRT) covering the EMEA region.
This position requires working a compressed schedule consisting of four extended working days per week, with shifts falling either Sunday through Wednesday or Wednesday through Saturday to maintain continuous 24/7/365 security operations. The engineer will handle major security events end-to-end, conduct detailed cloud-based investigations, and utilize automation and artificial intelligence to enhance threat detection, triage speed, and response workflows.
The role is well-suited for a driven digital forensics and incident response professional who thrives in fast-paced environments and wants to scale modern detection operations. Team members collaborate across AMER, APAC, and EMEA regions to protect both GitLab.com and broader cloud and corporate infrastructures.
Responsibilities
- Manage and coordinate end-to-end incident response for high-severity security issues during EMEA business hours as part of a global on-call rotation
- Produce concise executive updates to keep stakeholders informed during active security incidents
- Investigate complex cloud security threats using digital forensics and incident response techniques
- Work alongside Signals Engineering to create and refine detection rules, telemetry channels, and SIEM monitoring use cases
- Design and deploy automation and AI-assisted processes to speed up triage and investigations
- Collaborate with Threat Intelligence to understand adversary behaviors and expand detection coverage
- Perform root cause analysis and lead post-incident reviews to minimize future risks
- Author and update operational playbooks, runbooks, and documentation
- Partner with various departments such as Infrastructure, Engineering, Legal, and Communications during incidents and tabletop exercises
- Mentor fellow engineers to raise overall team incident response capabilities
Requirements
- Demonstrated background in security incident response and investigations within cloud-first environments
- Prior utilization or administration of Git or GitLab in a security or engineering setting
- Practical familiarity with SIEM systems, EDR tools, or detection engineering
- Experience working with cloud platforms like AWS and GCP
- Knowledge of adversary techniques and threat intelligence frameworks such as MITRE ATT&CK
- Background in creating or utilizing automation tools including Python scripting or SOAR platforms
- Strong problem-solving abilities and analytical skills suited for high-severity event management
- Exceptional written communication skills focused on producing clear operational documentation
- A proactive mindset dedicated to spotting and reducing security vulnerabilities
Qualifications
- Interest or hands-on practice in applying data-driven techniques, machine learning, or artificial intelligence to triage, detection, or response procedures
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote position?
Yes, all GitLab roles are remote, though certain positions may carry specific location-based eligibility requirements.
What is the employment type?
This is a full-time position operating on a compressed 4-day work schedule.
What is the salary for this role?
The salary is not stated in the job posting.
What hours and days will I be expected to work?
The role operates on a compressed 4-day workweek during EMEA business hours, with shifts running either Sunday through Wednesday or Wednesday through Saturday.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.