Specialty
The role
GitLab is hiring a Principal Security Researcher for its Application Security team to research vulnerabilities in the DevSecOps platform and its AI features, including Duo Agent Platform and Duo Chat. The role reports to the Senior Manager of Application Security.
What you will do
- Lead security research projects across several functional areas
- Find systemic and chained vulnerabilities and build proof-of-concept exploits
- Assess new vulnerability classes against the codebase and drive fixes for the whole class
- Lead research into AI and agentic features and define security requirements for them
- Direct tooling and automation for research, including agent-assisted vulnerability discovery
- Mentor experts and contributors across teams
What they ask for
- 10+ years in security research, penetration testing or offensive security
- Skill at finding and exploiting vulnerabilities in large codebases and complex systems
- Proficiency in two or more of Ruby, Go, Python, TypeScript or Rust
- Strong knowledge of AI frameworks and AI attack vectors such as prompt injection
- Experience driving cross-functional remediation initiatives
- Strong written communication and risk assessment skills
This is our own short reading of the posting. The full description, and anything that has changed since, is on GitLab's careers page behind the apply button.
