Opportunity at
GitLabStaff Software Engineer, Security Factory: Static Analysis
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security risks. More than fifty million registered users…
Career Tools
About This Role
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security risks. More than fifty million registered users and over half of the Fortune 100 rely on the platform to ship secure software rapidly. The organization incorporates artificial intelligence as a primary productivity multiplier across all team workflows. As a Staff Software Engineer focusing on the Security Factory: Static Analysis engine, you…
Job Description
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security risks. More than fifty million registered users and over half of the Fortune 100 rely on the platform to ship secure software rapidly. The organization incorporates artificial intelligence as a primary productivity multiplier across all team workflows.
As a Staff Software Engineer focusing on the Security Factory: Static Analysis engine, you will lead the technical direction of tools designed to help developers identify and fix vulnerabilities in their code. Your work involves shaping how the static analysis toolkit models programs—including parsing source code into intermediate representations, building call graphs, resolving symbols, and tracking tainted data across files and languages. You will also build evaluation tooling that tests engine findings against benchmark applications containing known vulnerabilities, while guiding AI agents that write and review code under human direction.
This position suits a systems programming expert with deep application security knowledge, experience building LLM tooling or agent pipelines, and a passion for static analysis and program evaluation. GitLab evaluates base salaries based on geographic location, education, experience, skills, knowledge, and market data.
Responsibilities
- Act as the directly responsible individual for high-scope team initiatives from design through delivery
- Transition systems built by a single engineer to team ownership using documentation, tests, and shared reviews
- Establish technical direction for AI-assisted tooling that implements, reviews, and validates engine changes
- Own the overarching architecture of program models, parsing, symbol resolution, call graphs, and taint analysis
- Solve complex technical impediments and collaborate with product management, UX, and partner teams
- Mentor team members through code pairing, code reviews, and the refinement of internal standards
- Participate in on-call rotations to support product operations, security operations, and urgent engineering tasks
- Define architectural specifications and direct implementation through AI agents and independent engineering work
- Build and maintain harnesses, agent instructions, and skills to keep agent-written code trustworthy
- Conduct AI-assisted research and spikes to create prototypes, proposals, and upstream open source contributions
Requirements
- Experience building LLM tooling such as harnesses, agent pipelines, or evaluations with reliable output judgment
- Extensive professional background writing, testing, and reviewing production code in Rust, Go, or a comparable systems language
- Experience with performance optimization, containerized workflows, and CI/CD tools like Docker
- Strong background in program and static analysis including ASTs, intermediate representations, and data-flow analysis
- Deep application security expertise encompassing vulnerability research, secure code review, and vulnerability classes
- Capacity to communicate complex technical ideas clearly and write design specifications that drive team decisions
- Track record of taking ownership of ambiguous problems and shipping them from concept to production
- Demonstrated ability to define system architecture and delegate component specifications to engineers and AI agents
Qualifications
- Familiarity with popular web or mobile application frameworks and their input, data, and configuration handling
- Experience designing guardrails for agent-written code through mutation testing, fuzzing, or CI gates
- A record of engagement with the research community through publications, tool papers, or open source contributions
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range for the Staff Software Engineer role?
For residents of the United States, the base salary range is USD 152,800 to 259,200 per year, though actual pay is determined by factors such as location, education, experience, and market alignment.
What programming languages are used in this role?
The analysis engine is written in Rust, the analyzer wrapper uses Go, and the monolith integration uses Ruby. Candidates should have professional experience in Rust, Go, or a comparable systems language.
Is the role remote?
The posting states that all of GitLab's roles are remote, though some roles may carry specific location-based eligibility requirements.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
