Specialty
The role
GitLab is hiring a Senior Security Engineer for its Security Incident Response Team, covering EMEA business hours within a 24/7 follow-the-sun model. The role uses a compressed four-day work week with shifts. It is remote.
What you will do
- Lead end-to-end incident response for high-severity security events in a global on-call model
- Investigate complex incidents in cloud environments using DFIR methods
- Work with Signals Engineering on detection capabilities, including SIEM use cases and alerting
- Build automation and AI-assisted workflows for triage and investigation
- Run root cause analysis and post-incident reviews, and keep runbooks and playbooks current
- Write executive communications during incidents and mentor other engineers
What they ask for
- Strong experience in security incident response and investigations in cloud-first environments
- Hands-on experience with SIEM, EDR and/or detection engineering
- Experience with AWS and GCP
- Familiarity with threat intelligence and adversary tactics such as MITRE ATT&CK
- Experience with automation such as Python, scripting or SOAR platforms
- Experience using or administering Git/GitLab in a security or engineering context
- Able to work a four-day schedule (Sunday-Wednesday or Wednesday-Saturday) during EMEA hours
What they offer
- Flexible paid time off
- Equity compensation and employee stock purchase plan
- Growth and development fund
- Parental leave
- Compressed four-day work week
This is our own short reading of the posting. The full description, and anything that has changed since, is on GitLab's careers page behind the apply button.
