Opportunity at
GitLabStaff Product Security Architect
GitLab is looking for a Staff Product Security Architect to join the Security Platforms and Architecture organization. GitLab operates an intelligent orchestration platform for DevSecOps that…
Career Tools
About This Role
GitLab is looking for a Staff Product Security Architect to join the Security Platforms and Architecture organization. GitLab operates an intelligent orchestration platform for DevSecOps that aids organizations in enhancing developer productivity, improving operational efficiency, mitigating security and compliance risks, and accelerating digital transformation. In this position, the professional functions as a hands-on technical driver rather than a purely consultative advisor. Responsibilities include embedding proactive guidance directly into developer workflows…
Job Description
GitLab is looking for a Staff Product Security Architect to join the Security Platforms and Architecture organization. GitLab operates an intelligent orchestration platform for DevSecOps that aids organizations in enhancing developer productivity, improving operational efficiency, mitigating security and compliance risks, and accelerating digital transformation. In this position, the professional functions as a hands-on technical driver rather than a purely consultative advisor. Responsibilities include embedding proactive guidance directly into developer workflows and automated coding environments, partnering closely with engineering and product leadership, and overseeing architectural strategy for strategic initiatives.
This role suits an experienced security professional with a strong background in application security architecture, distributed systems security, and software supply chain security. The practitioner will work on threat modeling, conduct architecture reviews, build prototypes, and codify recurring security decisions into reusable assets such as guardrails, standards, and design patterns. The base salary for United States residents ranges from $168,000 to $238,000 per year, and the company provides a variety of financial, health, and well-being offerings for full-time personnel.
Responsibilities
- Partner with engineering and product leadership across the organization to anticipate security issues
- Lead security architecture and design work for strategic initiatives and direct cross-functional teams
- Identify, assess, and prioritize systemic security risks as a Security Owner in the Product Security Risk Register
- Codify recurring security decisions into reusable guardrails, standards, design patterns, and reference threat models
- Build proofs of concept and prototypes to unblock engineering teams and streamline implementations
- Conduct security architecture reviews for large or strategic projects alongside Application Security
- Perform threat modeling on new and existing systems and establish patterns for teams to threat model their own work
- Collaborate with Security Research to explore unknown risks proactively
- Mentor security engineers across the division and represent security architecture to engineering audiences
Requirements
- Depth in application security architecture covering authentication and authorization models, privilege escalation, multi-tenant isolation, and trust boundary analysis
- Experience securing distributed systems including service-to-service authentication and secrets handling
- Working knowledge of software supply chain security including build and release integrity, artifact provenance, and dependency risk
- Track record of proactive architecture work preventing classes of problems rather than single instances
- Ability to build trusted relationships with engineering leadership and influence technical direction through expertise
- Experience defining security standards or patterns adopted by teams organically
- Ability to operate strategically while remaining hands-on with unfamiliar code and prototyping
- Clear written communication skills with the ability to articulate security arguments to engineering audiences
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range for the Staff Product Security Architect role?
The base salary range for United States residents is $168,000 to $238,000 per year, which does not include bonuses, equity, or benefits.
What type of employment is this?
This is a full-time position.
Where is the job located?
The specific location is not stated in the source posting, though GitLab hires team members globally with remote options subject to location eligibility requirements.
What are the core duties of a Security Architect at GitLab?
Security Architects act as hands-on technical drivers who conduct architecture reviews, build prototypes, threat model systems, and create reusable security guardrails for developer workflows.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
