Specialty
The role
GitLab is hiring a Staff Security Researcher for its Application Security team to research vulnerabilities in the DevSecOps platform and its AI features such as Duo Agent Platform and Duo Chat. The role reports to the Senior Manager of Application Security.
What you will do
- Research security in two or more specialty areas and find systemic and chained vulnerabilities
- Build proof-of-concept exploits to validate vulnerabilities
- Research GitLab's AI and agentic features and help define security requirements for them
- Build tooling and automation, including agent-assisted vulnerability discovery
- Research open source dependencies and report findings to maintainers
- Mentor others and give feedback to engineering teams
What they ask for
- 7+ years in security research, penetration testing or offensive security
- Hands-on experience discovering and exploiting vulnerabilities
- Subject matter expert in at least two technical areas affecting product security
- Proficiency in one or more of Ruby, Go, Python, TypeScript or Rust
- Understanding of AI attack vectors such as prompt injection and agent manipulation
- Able to analyze code across multiple languages
- Strong written communication and risk reporting
This is our own short reading of the posting. The full description, and anything that has changed since, is on GitLab's careers page behind the apply button.
