Staff Corporate Security Engineer

📋 Description

• Lead the security architecture of GitLab's endpoint fleet with a focus on macOS.
• Design automation for secure endpoint deployment, configuration, and lifecycle management using
• Manage endpoint and SaaS security configuration via Terraform, version control, MR, CI pipelines
• Define security baselines across macOS, iOS, Windows, and Linux endpoints.
• Develop patching and software distribution aligned with security, compliance, and ops requirements.
• Collaborate with IT, Security Operations, and Detection & Response to improve telemetry

🎯 Requirements

• Experience designing endpoint, systems, or corporate security solutions with scalable, durable
• Deep knowledge of endpoint management platforms (e.g., Jamf Pro, FleetDM) for macOS.
• Strong hands-on ability with Terraform and Infrastructure-as-Code, including modules, state, and
• Experience with GitOps workflows (Git repositories, merge requests, code review, automated
• Proficient scripting/programming for automation and security tooling (bash, Python, PowerShell, Go).
• Familiarity with cloud identity providers/directories (Okta, Google Workspace, LDAP).

🎁 Benefits

• Remote-first role with flexible work arrangements and equitable compensation.
• Base salary range context provided for US residents; benefits and equity information available in
• Benefits to support health, finances, and well-being; parental leave and growth opportunities.