Specialty
The role
GitLab is hiring a Staff Product Security Architect in its Security Platforms and Architecture organization, working as a hands-on technical driver rather than a purely advisory role. The first assignment is as the Core DevOps architect, owning security risk for that area.
What you will do
- Partner with engineering and product leaders to anticipate security problems
- Lead security architecture and design for strategic initiatives
- Act as Security Owner for high-priority items in the Product Security Risk Register and co-run remediation
- Turn recurring security decisions into guardrails, standards, design patterns and reference threat models for developer and AI coding tool workflows
- Build proofs of concept and run security architecture reviews and threat modeling
- Mentor security engineers and work with Security Research on unknown risks
What they ask for
- Depth in application security architecture: authentication, authorization, privilege escalation and multi-tenant isolation
- Experience securing distributed systems, including service-to-service authentication and secrets handling
- Working knowledge of software supply chain security: build integrity, provenance and dependency risk
- Track record of proactive architecture work that prevents classes of problems
- Ability to influence engineering leaders and stay hands-on, including reading unfamiliar code and building prototypes
- Clear written communication, including to skeptical engineering audiences
This is our own short reading of the posting. The full description, and anything that has changed since, is on GitLab's careers page behind the apply button.
