Specialty
The role
GitLab is hiring a staff backend engineer for its Security Factory: Code Scanning team. You would set technical direction for the static analysis engine that finds security issues in code, and for the AI-agent tooling used to build and validate it. The role is remote.
What you will do
- Own the architecture of the program model: parsing, symbol resolution, call graphs and taint analysis
- Lead the team's highest-scope initiatives from design to delivery with minimal guidance
- Write architecture and specification documents and delegate components to engineers and AI agents
- Build the harness and review gates that keep agent-written code trustworthy
- Measure detection quality against benchmark apps with known vulnerabilities and write SAST rules mapped to CWE and OWASP
- Mentor engineers, join on-call rotations and run research spikes with upstream contributions
What they ask for
- Experience building your own LLM tooling such as a harness, agent pipeline or evaluations
- Extensive production experience in Rust, Go or a comparable systems language, with depth in one
- Deep background in program analysis and static analysis
- Experience with performance optimization
- Experience with containerized workflows and CI/CD, including heavy Docker use
- Willingness to work across Rust, Go and Ruby code
This is our own short reading of the posting. The full description, and anything that has changed since, is on GitLab's careers page behind the apply button.
