Specialty
The role
GitLab is hiring an Intermediate Security Engineer for its Security Incident Response Team, protecting GitLab.com and the company. The role uses a compressed four-day schedule with shifts Sunday through Wednesday for 24/7 coverage. All GitLab roles are remote.
What you will do
- Lead incident response in a 24/7 global rotation, from detection through containment and recovery
- Write and maintain incident response runbooks and standard procedures
- Run root cause analysis and lessons-learned reviews after incidents
- Design automated security processes to reduce manual work
- Identify security gaps and build better detection and response capabilities
What they ask for
- Able to run incident response processes independently
- Experience with SIEM or security logging tools
- Experience with cloud platforms such as GCP or AWS
- Python skills or strong willingness to learn
- Willing to work four longer days, Sunday through Wednesday
- Interest in technical documentation and forensic analysis of infected hosts
What they offer
- Flexible paid time off
- Equity compensation and employee stock purchase plan
- Growth and development fund
- Parental leave
This is our own short reading of the posting. The full description, and anything that has changed since, is on GitLab's careers page behind the apply button.
