Staff Product Security Architect

View Company

Role Snapshot

Hiring Now

Work arrangement: Remote
Where applicants may be: Applicants in United States only
Salary: Not specified
Apply by: Not specified
Employment type: Full-time
Experience: Not specified

Published2h ago

Listing Views0

Applications0

Apply BeforeNo deadline

Career Tools

About This Role

GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security and compliance risks. The company is currently seeking a Staff Product Security Architect to join the Security Platforms and Architecture group on a full-time, remote basis. This position is designed for hands-on technical professionals who want to shape security standards within modern software development environments. Rather than acting strictly as a consultative…

Job Description

This position is designed for hands-on technical professionals who want to shape security standards within modern software development environments. Rather than acting strictly as a consultative body, security architecture at GitLab involves proactive technical driving, building prototypes, and embedding protective practices directly into developer and AI coding workflows. Team members collaborate closely with product engineering departments to minimize reliance on manual security checks and foster autonomous execution.

The role suits experienced security practitioners who possess deep expertise in application security architecture, distributed systems, and software supply chain security. Ideal candidates combine strategic foresight with hands-on capabilities such as code review and prototyping. Professionals who value a high-performance culture driven by continuous knowledge exchange and collaboration will find an environment geared toward accelerating innovation and career growth.

Responsibilities

Partner with engineering and product leadership to anticipate and mitigate security problems proactively
Lead security architecture and design efforts for strategic company initiatives
Act as Security Owner for high-priority items inside the Product Security Risk Register and co-execute remediation efforts
Codify recurring security decisions into reusable standards, guardrails, design patterns, and reference threat models
Construct prototypes and proofs of concept to accelerate implementation of security requirements
Conduct comprehensive security architecture reviews for large and strategic projects in coordination with Application Security
Perform threat modeling on new and existing systems and establish patterns for teams to threat model their own work
Collaborate with Security Research to explore unknown architectural risks
Anticipate emerging security challenges and propose architectural solutions prior to implementation
Mentor security engineers across the division and represent security architecture to engineering audiences

Requirements

Demonstrated depth in application security architecture, covering authorization and authentication models, multi-tenant isolation, trust boundary analysis, and privilege escalation
Experience securing distributed systems, including service-to-service authentication and secrets handling
Working knowledge of software supply chain security, dependency risk, and build and release integrity
Proven track record of proactive architecture work preventing entire classes of security problems
Ability to build trusted relationships with engineering leadership and influence technical direction through expertise
Experience defining security standards or patterns adopted by engineering teams organically
Capacity to operate strategically while remaining hands-on through code reading and prototyping
Clear written communication skills with the ability to advocate for security positions to skeptical engineering audiences

Core Skills

React Git Communication Leadership Sales Recruitment DevOps

Benefits

Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation and Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Is this position remote?

Yes, this is a remote role, though some positions may carry specific location-based eligibility requirements.

What is the employment type?

This is a full-time position.

What salary does this role offer?

The base salary range for United States residents is $168,000 to $238,000 USD, though exact compensation depends on factors like experience, location, and market data. Salaries for locations outside the US are not specified in the posting.

How can I apply if I do not meet every single qualification?

The posting notes that many successful candidates do not meet every single requirement and encourages applicants to apply so recruiters can assess their application.