Staff Infrastructure Security Engineer

About GitLab and this Role

GitLab is a leading platform for DevSecOps orchestration, trusted by over 50 million users and half of the Fortune 100 companies to deliver secure software more efficiently. Our team embraces AI to enhance productivity and innovation, fostering a high-performance culture rooted in continuous knowledge sharing and values-driven collaboration.

The Infrastructure Security Team within the Product Security Department is looking for a Staff Infrastructure Security Engineer. This role involves working with multiple teams to ensure that GitLab's public cloud infrastructure components are designed with robustness and security expectations that our clients depend on. You will be a technical leader influencing infrastructure security practices across GitLab's SaaS platforms and Self-Managed products, guiding technical strategy and implementation to empower global software development.

Responsibilities

• Develop architectural standards, reference implementations, and foundational automation for infrastructure security across GitLab.
• Lead complex infrastructure security projects from conceptualization to delivery, breaking down large initiatives into manageable actionable goals with defined success metrics.
• Conduct thorough security assessments and threat modeling for infrastructure elements, identifying systemic vulnerabilities and orchestrating remediation efforts.
• Define and implement AI-driven security engineering approaches to enhance team effectiveness and establish scalable methodologies.
• Act as the technical authority for Infrastructure Security, communicating architectural trade-offs and decisions clearly to engineering teams and senior stakeholders.
• Collaborate on technical planning, prioritize tasks, and create roadmaps aligning with business objectives.
• Mentor and support engineering team members, fostering inclusive teamwork and raising technical standards.
• Support the Product Security Division’s mission by securing GitLab infrastructure using GitLab’s own product tools.

Qualifications

• Deep expertise in cloud infrastructure security (AWS, GCP, Azure), Kubernetes, and associated infrastructure/data security areas.
• Proficiency in programming languages such as Go, Python, and Ruby with experience delivering production-grade security tools.
• Strong background in Infrastructure-as-Code security involving Terraform, Ansible, CloudFormation, and expertise with policy-as-code and automated compliance.
• Practical experience integrating AI into security workflows to achieve meaningful efficiency gains.
• Proven leadership of multi-team technical initiatives, translating vague goals into clear technical directions and measurable outcomes.
• Exceptional communication abilities to explain security decisions effectively to both technical teams and executive leadership.
• Familiarity with security compliance frameworks and certifications including FedRAMP, ISO 27001, SOC 2, and PCI-DSS.
• Alignment with GitLab’s company values and commitment to collaborative work.

Additional Information

GitLab welcomes candidates of varying experience levels and encourages applications from underrepresented groups. We provide various benefits including health and well-being support, flexible paid time off, employee resource groups, equity compensation, development funds, and parental leave.

All positions are remote with potential location-based eligibility considerations applied during recruitment. GitLab is an equal opportunity employer committed to non-discrimination and inclusivity throughout its hiring and employment practices.