Become a key player in our Information Security team as a Senior DevSecOps Engineer, where you will leverage your expertise in application security, security engineering, and software development to support and enhance our inline code testing and reporting processes. This role involves the implementation and administration of application security tooling, integration into CI/CD pipelines, and providing support for development teams.
The Infrastructure Application Security Architect is responsible for developing and implementing a comprehensive information security program. Key duties include designing secure application architectures, ensuring secure coding and deployment, and defining security policies. This position requires a deep understanding of secure application development practices, API security, and risk identification in system configurations.
This role focuses on making our product secure by design—embedding security into how software is architected, written, deployed, and maintained. This position centers on application-layer and code-level security, working closely with developers to enable fast, confident delivery by providing meaningful, actionable security tooling and feedback. You will ensure engineering teams move faster—not slower—while minimizing noise.
The Application Security team works with GitLab engineers and product teams to anticipate and prevent the introduction of vulnerabilities during design and development, ensuring delivery of high quality software GitLab customers can trust. Assist with security-focused code reviews and threat models under guidance from senior team members. Manage triage of inbound new issues and contribute to documentation and security process improvements.
We are seeking a highly skilled and forward-thinking Application Security Architect to lead the integration of security into our software development lifecycle. The ideal candidate will have a deep understanding of secure coding practices, CI/CD pipeline security, and modern application architecture. This role is essential for partnering with our development, engineering, and DevOps teams to build a culture of security and to ensure our applications are secure by design.
We are seeking a talented and motivated Senior Application Security Engineer responsible for ensuring the security of our applications throughout the development lifecycle. You will work closely with engineering teams to identify and mitigate security vulnerabilities, implement security best practices, and contribute to the organization's overall security strategy.