Threat Research Engineer

Role Responsibilities:

• Research new attack surfaces and threat vectors, including AI coding agents, agent plugins, and package ecosystems.
• Find and responsibly disclose vulnerabilities in open source projects and developer tools.
• Analyze software supply chain incidents and events.
• Build AI-powered workflows and agents that automate research, analysis, and detection.

Qualifications and Experience:

• Hands-on security experience in research, malware analysis, penetration testing, or security tooling.
• Demonstrated experience using AI in real work, such as building with large language model APIs or agent frameworks.
• Strong programming skills in Go or Python, with good software engineering practices.
• Experience deploying and running production services on a public cloud.

About the Team:

• The Threat Research group researches security threats as they emerge and turns what we learn into protection for GitLab customers.
• We maintain the GitLab Advisory Database, which powers GitLab’s dependency scanning.
• We build detection capabilities, do original vulnerability research, and publish what we find.

Benefits and Perks:

• Flexible Paid Time Off.
• Equity Compensation & Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental Leave.