Opportunity at
GitLabThreat Research Engineer
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security risk. More than half of Fortune 100…
Career Tools
About This Role
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security risk. More than half of Fortune 100 companies and over 50 million registered users utilize the platform. The organization embraces artificial intelligence as a core productivity driver, expecting all team members to incorporate AI into their everyday workflows. As a Threat Research Engineer at GitLab located in India, you will investigate…
Job Description
GitLab operates an intelligent orchestration platform for DevSecOps, helping organizations boost developer productivity, enhance operational efficiency, and lower security risk. More than half of Fortune 100 companies and over 50 million registered users utilize the platform. The organization embraces artificial intelligence as a core productivity driver, expecting all team members to incorporate AI into their everyday workflows.
As a Threat Research Engineer at GitLab located in India, you will investigate emerging security threats to protect customers. This full-stack position involves exploring new attack surfaces, such as package ecosystems, agent plugins, and AI coding agents. You will take ideas from initial research questions through to working proofs of concept, deployment, and results analysis. Artificial intelligence is central to this work, requiring daily use of AI tools and the creation of agentic workflows for analysis, detection, and research. You will operate within the Threat Research group, which maintains the GitLab Advisory Database and shares findings on the Security Labs blog.
Responsibilities
- Investigate new attack surfaces and threat vectors encompassing package ecosystems, agent plugins, and AI coding agents
- Discover and responsibly disclose vulnerabilities within open-source projects and developer tools
- Examine software supply chain incidents and events
- Develop AI-powered workflows and agents designed to automate detection, research, and analysis
- Construct and maintain cloud-based systems that support advisory and detection operations
- Enhance the coverage and quality of malware and vulnerability advisories
- Produce blog posts regarding findings and present them at conferences
Requirements
- Practical security background in research, malware analysis, penetration testing, or security tooling
- Familiarity with package ecosystems and software supply chain attacks
- Both an adversarial mindset and a developer mindset
- Proven experience utilizing AI in practical applications, including working with large language model APIs or agent frameworks like LangGraph, LangChain, or agent software development kits
- Proficiency in Python or Go programming languages
- Adherence to software engineering standards such as testing, code review, CI/CD, and maintainable code creation
- Background in deploying and executing production services on public cloud infrastructure
- Capacity to map attack vectors, explain trade-offs, and utilize data to drive experiments
- Clear communication skills tailored for engineers and general audiences alike
Qualifications
- Familiarity with Google Cloud Platform
- Published findings or Common Vulnerabilities and Exposures entries
- Prior research focusing on Model Context Protocol servers, LLM applications, or AI agents
- Published blogs, talks, or open-source security tools
- Experience with OpenTofu or Terraform
- Background working with large-scale data pipelines or databases
- Reverse engineering experience
Core Skills
Benefits
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation and Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
This is a full-time position.
What is the salary for the Threat Research Engineer position?
The source posting does not specify a salary.
What are the location requirements for this role?
The job is located in India, and GitLab hires new team members globally with potential location-based eligibility requirements handled by the Talent Acquisition team.
What tools and technologies are used in this role?
The role utilizes programming languages such as Go and Python, large language model APIs, agent frameworks like LangChain and LangGraph, and public cloud services.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.