About the job
Join GitLab, the leading intelligent orchestration platform for DevSecOps, and be part of a mission that empowers organizations to enhance developer productivity, streamline operational efficiency, minimize security and compliance risks, and fast-track digital transformation. Trusted by over 50 million registered users, including more than 50% of the Fortune 100, GitLab is dedicated to delivering secure software swiftly and effectively.
At GitLab, we embrace artificial intelligence as a vital productivity enhancer. Every team member is encouraged to integrate AI into their daily routines to foster efficiency, creativity, and significant impact. This is a place where careers thrive, innovation blossoms, and every voice is acknowledged. Our high-performance culture, guided by our values, promotes continuous knowledge sharing, allowing team members to maximize their potential while collaborating with industry leaders to tackle complex challenges. Help us shape the future as we revolutionize software development.
Role Overview
As a Senior Corporate Security Engineer, you will play a crucial role in securing the systems that GitLab team members rely on in a fully remote setting. Operating within the Corporate Security Engineering team, you will focus on establishing secure-by-default controls for endpoints and the SaaS platforms that support them, with particular attention to macOS. You will be responsible for making significant technical decisions regarding endpoint hardening, automation, and detection, transforming security requirements into scalable engineering systems that are measurable, auditable, and user-friendly.
If you are passionate about solving security challenges through code, this role is a perfect match. You will collaborate across endpoint management, identity, and security operations to enhance how GitLab manages macOS, iOS, Windows, and Linux devices utilizing Infrastructure-as-Code, Terraform, and GitOps workflows. In your first year, you will aim to bolster endpoint security architecture, broaden automation efforts, and enhance the reliability and auditability of control deployment and maintenance.

