Senior Security Detection Engineer

📋 Description

• Identify MITRE ATT&CK/top threat actor detection gaps and write behavioral detections to close
• Be a detection SME and deeply understand GitLab's detection methodology, DaC framework, detection
• Act as a 'detection architect' - orchestrating agents across the entire detection lifecycle and
• Use a SIEM/data lake platform like Splunk or Elastic to write and troubleshoot threat detections
• Collaborate with peer GitLab teams to identify and close security observability improvement
• Collaborate with incident response, red team, as well as threat intelligence to cross functionally

🎯 Requirements

• An understanding of the GitLab application, bonus points if you are comfortable detecting and
• SOC, incident response or detection engineering expertise
• SIEM/security data lake detection and query expertise
• A proven ability to proactively detecting potentially malicious patterns and collaborating with
• Strong Cloud (AWS/GCP) and some PaaS (Kubernetes/terraform) experience
• Experience orchestrating teams of agents to write detections - bonus points for experience building

🎁 Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave