Staff Security Researcher

What you'll do:

• Conduct security research in two or more specialty areas, identifying novel, systemic, and chained vulnerabilities in GitLab.
• Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios.
• Build tooling and automation to scale security research, including agent-assisted vulnerability discovery across the codebase.

What you'll bring:

• 7+ years of experience in security research, penetration testing, or offensive security roles.
• Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust.
• Understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation.

About the team:

• Security Researchers are part of the Application Security team, addressing complex security challenges facing GitLab and its customers.
• The team focuses on systemic product security risks and works cross-functionally to mitigate them while maintaining engineering velocity.