Principal Security Researcher

📋 Description

• Conduct and lead security research projects across multiple functional areas.
• Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses
• Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits
• Assess emerging industry vulnerability classes against the GitLab codebase, and drive remediation
• Lead security research into GitLab's AI and agentic surfaces, and define the security requirements
• Build and direct the tooling and automation that scales security research, including agent-assisted

🎯 Requirements

• 10+ years of experience in security research, penetration testing, or offensive security roles
• Strong ability in discovering and exploiting vulnerabilities in large codebases and complex systems
• Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust
• Ability to read and analyze code across multiple languages and codebases
• Strong knowledge of AI frameworks
• Strong understanding of AI attack vectors including prompt injection, agent manipulation, and

🎁 Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave