Remote opportunity at
GitLabStaff Product Security Architect
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security compliance risks. The platform serves more than…
Career Tools
About This Role
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security compliance risks. The platform serves more than 50 million registered users and over half of the Fortune 100 to deliver secure software rapidly. Team members at the company are expected to integrate artificial intelligence into their everyday workflows to foster innovation and efficiency. The company is seeking a Staff Product Security…
Job Description
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security compliance risks. The platform serves more than 50 million registered users and over half of the Fortune 100 to deliver secure software rapidly. Team members at the company are expected to integrate artificial intelligence into their everyday workflows to foster innovation and efficiency.
The company is seeking a Staff Product Security Architect to join the Security Platforms and Architecture organization. Operating as a hands-on technical driver rather than a purely consultative body, this position embeds proactive security guidance into automated coding environments and modern developer workflows. The individual chosen for this role will partner with product engineering groups, lead architectural strategies for key initiatives, and act as the Security Owner for critical product security risks.
Key duties involve conducting architectural design reviews, building technical prototypes, creating scalable patterns for engineering autonomy, threat modeling systems, and establishing guardrails and reference threat models for AI and human coding tool workflows. The selected architect will also mentor security engineering personnel and collaborate closely with Application Security and Security Research teams.
Responsibilities
- Partner with product and engineering leadership to anticipate security challenges
- Lead security architecture and design for strategic initiatives
- Serve as Security Owner for high-priority items in the Product Security Risk Register and co-execute remediation
- Codify recurring security decisions into reusable standards, guardrails, design patterns, and reference threat models
- Build proofs of concept and technical prototypes to unblock engineering teams
- Conduct security architecture reviews for large projects alongside Application Security
- Perform threat modeling on new and existing systems and establish team threat modeling patterns
- Collaborate with Security Research to proactively explore unknown risks
- Anticipate emerging security problems and propose architectural responses
- Mentor security engineers and represent security architecture to engineering audiences
Requirements
- Demonstrated depth in application security architecture covering authentication and authorization models, privilege escalation, multi-tenant isolation, and trust boundary analysis
- Practical background in securing distributed systems, secrets handling, and service-to-service authentication
- Working knowledge of software supply chain security including artifact provenance, build and release integrity, and dependency risk
- Track record of proactive architecture work preventing problem classes rather than isolated incidents
- Experience building trusted relationships with engineering leadership to influence technical direction
- Ability to operate strategically while remaining hands-on through reading unfamiliar code and building prototypes
- Clear written communication skills with the capability to advocate security arguments to engineering peers
- Perspective on authorship and delivery of security guidance for AI coding tools
Core Skills
Benefits
- Flexible paid time off
- Team member resource groups
- Equity compensation and employee stock purchase plan
- Growth and development fund
- Parental leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this job remote?
Yes, GitLab hires team members in countries around the world and all roles are remote, though certain positions may carry specific location-based eligibility requirements.
What is the salary for the Staff Product Security Architect role?
For residents of the United States, the base salary range is USD 168,000 to 238,000 per year, determined through interviews, education, experience, market data, and geographic location.
What team will this architect join?
This position sits within the Security Platforms and Architecture organization, specifically acting as the Core DevOps architect.
What type of employment is this?
The posting specifies full-time employment.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
