Intermediate Security Analyst, Vulnerability Operations (North America)
Benefits
Unlimited PTO
Similar Jobs
See allVulnerability/Threat Management Analyst
Revinate
US
Python
AWS
Jira
Vulnerability Management Engineer (ServiceNow)
GuidePoint Security
US
ServiceNow
JavaScript
Python
Security Analyst
Power Digital
Global
Security Monitoring
SIEM
Vulnerability Assessment
Cyber Threat Exposure Management Analyst
Version 1
Vulnerability Management
Cloud Security
Penetration Testing
Product Security Engineer
Vercel
Global
JavaScript
TypeScript
Node.js
What you’ll do:
- Triage incoming bug bounty reports, assess validity and impact, and route to appropriate teams.
- Support severity assessment using CVE, CVSS, CWE, and OWASP frameworks.
- Draft customer-facing communications and maintain accurate issue records.
What you’ll bring:
- Foundational understanding of software vulnerabilities and security concepts like web applications, APIs, and CI/CD.
- Familiarity with CVE assignment, CNA processes, and vulnerability databases.
- Clear written and verbal communication skills for both technical and non-technical audiences.
About the team:
- The Product Security Vulnerability Operations team ensures GitLab delivers secure applications and governs vulnerability policies.
- Team members collaborate across regions using documented processes, automation, and structured handoffs.
- The team serves as a central point of contact for external security researchers and supports ongoing operational improvements.
GitLab
GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity and reduce security risk. More than 50 million registered users and over 50% of the Fortune 100 trust GitLab, which fosters a high-performance culture driven by values and continuous knowledge exchange.