Opportunity at
GitLabStaff Product Security Architect
GitLab is looking for a Staff Product Security Architect to join its Security Platforms and Architecture organization. GitLab operates an intelligent orchestration platform for DevSecOps, helping…
Career Tools
About This Role
GitLab is looking for a Staff Product Security Architect to join its Security Platforms and Architecture organization. GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security and compliance risks. More than half of Fortune 100 companies and over 50 million registered users rely on the platform to build secure software more rapidly. In this position, you will work within the Security…
Job Description
GitLab is looking for a Staff Product Security Architect to join its Security Platforms and Architecture organization. GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer efficiency, streamline operations, and minimize security and compliance risks. More than half of Fortune 100 companies and over 50 million registered users rely on the platform to build secure software more rapidly.
In this position, you will work within the Security Platforms and Architecture group, which includes Security Architecture, Security Research, and Application Security teams. Rather than functioning purely in a consulting capacity, Security Architecture acts as a technical driver, embedding proactive security measures directly into developer workflows and automated coding environments. You will partner closely with product engineering units, spearhead architectural strategy for vital capabilities, and act as a primary Security Owner to lower risk across key framework elements.
Daily responsibilities span architecture design reviews, technical prototyping, threat modeling, and formulating scalable patterns that empower engineering teams to operate independently. Candidates should bring deep experience in application security architecture, distributed systems security, and software supply chain security, alongside strong written communication skills and the ability to influence technical direction through expertise.
Responsibilities
- Collaborate with engineering and product leadership to anticipate security issues ahead of time
- Drive security architecture and design for strategic initiatives and direct cross-functional delivery teams
- Identify, assess, and prioritize systemic security risks as a Security Owner in the Product Security Risk Register
- Translate recurring security choices into reusable assets such as guardrails, standards, design patterns, and reference threat models
- Construct prototypes and proofs of concept to help engineering teams implement security requirements efficiently
- Perform security architecture reviews for large projects and coordinate with Application Security for coverage
- Threat model new and existing systems while establishing patterns for teams to evaluate their own work
- Work with Security Research to explore unknown architectural risks proactively
- Anticipate emerging security challenges to propose architectural solutions prior to implementation
- Mentor security engineers across the division and represent security architecture to engineering audiences
Requirements
- Expertise in application security architecture including authentication, authorization, privilege escalation, multi-tenant isolation, and trust boundary analysis
- Background in securing distributed systems such as service-to-service authentication and secrets handling
- Familiarity with software supply chain security encompassing build and release integrity, artifact provenance, and dependency risk
- Proven track record of proactive architecture work preventing entire classes of problems
- Demonstrated capability to build trusted relationships with engineering leadership and influence technical direction
- Experience defining security standards or patterns adopted naturally by teams
- Capacity to operate strategically while staying hands-on with code reviews and prototyping
- Strong written communication skills tailored for an engineering audience
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range for the Staff Product Security Architect role?
The base salary range for United States residents is USD 168,000 to 238,000 per year, excluding bonuses, equity, or benefits.
What team will I be joining at GitLab?
You will join the Security Platforms and Architecture organization, specifically as part of the team focusing on functional product areas.
Is this a remote position?
The posting notes that GitLab hires new team members globally and that roles are remote, though some may carry specific location-based eligibility requirements.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
