Source Job

• Design and implement backend features across the Add-On's software supply chain security surface.
• Build and improve the package policy evaluation engine, including rule compilation, request matching, enforcement decisions, and performance-sensitive execution paths tied to GitLab's Dependency Firewall infrastructure.
• Develop artifact signing and verification workflows, including Sigstore and Cosign integrations, signing key lifecycle management, keyless signing with OpenID Connect (OIDC), and policy-based promotion gates, enabling trusted and auditable software delivery.

GitLab is the intelligent orchestration platform for DevSecOps. More than 50 million registered users and more than 50% of the Fortune 100 trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works; they embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact.

• Define and drive the technical architecture for the SSCS Add-On, including backend systems for package policy enforcement, provenance generation, artifact signing, and malicious package detection.
• Lead design and implementation work for Supply-chain Levels for Software Artifacts (SLSA) Level 2 and Level 3 capabilities within GitLab CI/CD.
• Architect integrations with Sigstore services such as Cosign, Fulcio, and Rekor, including approaches for signing workflows, verification, and trust boundaries.

GitLab is the intelligent orchestration platform for DevSecOps. More than 50 million registered users and more than 50% of the Fortune 100 trust GitLab to ship better, more secure software faster.

• Guide the design and implementation of backend features for GitLab Secret Detection in Ruby on Rails, GraphQL, and Go.
• Build clean, well-tested, maintainable code that meets GitLab standards for reliability and performance.
• Partner with product management and engineering peers to deliver backend capabilities that improve detection, validation, remediation, and audit trail coverage.

GitLab is the intelligent orchestration platform for DevSecOps. They enable organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. They have more than 50 million registered users and are a high-performance culture driven by their values and continuous knowledge exchange.

• Develop features used by thousands of customers and deliver fast, consistent, and high-energy product releases.
• Work remotely from the US, India, and Europe.
• Stretch your technical skills in a distributed cloud environment, making changes across systems built with various tech stacks to meet challenging requirements.

Bloomreach is building the world’s premier agentic platform for personalization, revolutionizing how businesses connect with their customers. Bloomreach powers personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora.

• Orchestrate multiple agents.
• Ship end-to-end features.
• Work on a global travel commerce engine.

Hopper is a global travel commerce engine. We are a dynamic company employing cutting-edge technology.

• Working on the overall experience that surrounds signing in to and unlocking 1Password.
• Integrating tightly with their authentication stack to make this a seamless and delightful experience for customers.
• Responsible for making it easy for every user to integrate 1Password into their daily lives.

1Password is a cybersecurity company building the foundation for a safe, productive digital future. They have over 180,000 businesses, from Fortune 100 leaders to the world’s most innovative AI companies, trusting 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work.

• Lead the design and development of products and solutions for state governments and enterprise customers
• Work side-by-side with customer delivery leads, engineers, and UX designers to ensure successful projects delivery and deployments
• Translate customer requirements into technical architectures and working implementations

SpruceID builds privacy-preserving, standards-based digital identity and credentialing solutions. They give individuals control of their information while enabling governments and enterprises to deliver secure, interoperable services.

• Own the Workstream: You own projects from conception to deployment, translating high-level product goals into stable, scalable backend architecture.
• Master a Fluid Scope: Your work will span credit cards, loans, and foundational technical debt based on sprint needs and your own interests.
• Solve from First Principles: You articulate the root cause, define the trade-offs of various solutions, and implement the one that serves our customers best.

Tilt is creating a new credit system that backs the working, whatever they're working toward. They have extended $4.5B+ in credit by trusting that people are "good for it."

• Deliver solutions to complex problems.
• Design and maintain large and scalable systems.
• Engage in critical analysis of development tools and processes.

Grupo QuintoAndar is the largest real estate ecosystem in Latin America. They have a diversified portfolio of brands and solutions across different countries in Latin America and a Technology Hub in Portugal. Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance.

• You’ll join the team that owns our device-resident agent and expand how 1Password software is installed, configured, and managed across customer devices.
• You’ll help design and build the mechanisms that make enterprise deployment simpler, more reliable, secure, and observable at scale.
• You’ll help shape our enterprise installation and lifecycle experience end-to-end, ensuring reliability, security, and observability at scale.

1Password is building the foundation for a safe, productive digital future. They innovate the market-leading enterprise password manager and pioneered Extended Access Management. They are one of the most loved brands in cybersecurity.

• Proactively building our pipeline of exceptional talent.
• Connecting with outstanding professionals.
• Keeping your information on file and reaching out when a position becomes available.

GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Their mission is to enable everyone to contribute to and co-create the software that powers our world.

• Implement well-scoped backend features across the AI Governance product area.
• Build and maintain automated test coverage for your work using RSpec or equivalent tools.
• Work closely with senior and staff engineers to deliver solutions that are reliable and maintainable.

GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. The company has more than 50 million registered users and its culture embraces AI, valuing innovation and collaboration.

• Implement backend features across the Add-On's supply chain security product, including package policy integrations, ingestion pipeline improvements and delivering maintainable code.
• Build and maintain integrations between Add-On functionality and GitLab's existing software composition analysis scanning infrastructure to improve a reliable user experience.
• Write and maintain comprehensive automated test coverage, including RSpec and integration tests, to improve test reliability and support safe releases as the codebase grows.

GitLab is the intelligent orchestration platform for DevSecOps. More than 50 million registered users trust GitLab to ship better, more secure software faster. Their high-performance culture is driven by their values and continuous knowledge exchange, enabling their team members to reach their full potential while collaborating with industry leaders to solve complex problems.

• Lead the development of major team-scoped projects, participate in cross-team initiatives
• Actively participate in product work in the team: provide feedback, suggest solutions to the problems.
• Use technical insights and expertise to suggest product improvements

Remote is solving modern organizations’ biggest challenge – navigating global employment compliantly with ease. They enable businesses of all sizes to recruit, pay, and manage international teams with a future-focused work culture. The team works asynchronously around the world.

• Design, develop, and maintain scalable, robust backend features and APIs using modern frameworks.
• Ensure high performance and reliability across our distributed systems.
• Contribute to systems powering authentication, billing, AI tooling, observability, connectors, and developer experience.

Mistral AI democratizes AI through high-performance, optimized, open-source and cutting-edge models, products, and solutions, with a comprehensive AI platform designed to meet enterprise needs. They are a dynamic and collaborative team passionate about AI, with a diverse workforce thriving in competitive environments and committed to driving innovation; their teams are distributed between France, USA, UK, Germany, and Singapore.

• Lead the development and maintenance of our backend systems.
• Ensure systems are robust, efficient, and scalable.
• Collaborate with cross-functional teams to deliver high-quality solutions.

We are a rapidly growing company. Our culture fosters collaboration and innovation.

• Develop a strong understanding of Workera's AI-powered platform, customers, and business model.
• Actively lead and deliver your first full project, owning backend architecture, build, and rollout end-to-end.
• Architect and own backend systems that are robust, performant, and built to scale.

Workera is redefining how enterprises understand, develop, and mobilize talent in the age of AI. The company is a fast-growing, Series B Silicon Valley company building AI-native skill assessments for the world’s largest organizations, with clients including Samsung, Siemens Energy, and the U.S. Air Force.

• Work with a team of engineers to build, maintain, and scale Affirm's critical experimentation, feature flag, and feature store infrastructure serving millions of customers.
• Ship code and monitor the deployment of your work, contributing to the team's projects and goals.
• Work collaboratively and proactively with the team and stakeholders, creating visibility and dialog regarding the risks and trade-offs.

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. They are a remote-first company where the majority of their roles are remote and you can work almost anywhere within the country of employment.

• Break down larger projects into individual tasks and deliver them in multiple phases.
• Collaborate with product management, design & analytics.
• Contribute to a sense of community on your team.

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. Affirm is a remote-first company with competitive benefits and a transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.

• Develop software using the KnowBe4 Software Development Lifecycle and Agile Methodologies.
• Assist other team members by providing technical direction.
• Define approaches and solutions to complex technical problems.

KnowBe4 is a global leader in Human Risk Management, securing employees and AI agents for over 15 years, trusted by over 70,000 organizations worldwide. Their HRM+ combines continuous risk intelligence, advanced technical defenses, and personalized training to help organizations build strong security cultures.