Staff Security Researcher

📋 Description

• Conduct security research in two or more specialty areas.
• Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses
• Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits
• Assess emerging industry vulnerability classes against the GitLab codebase in your areas of
• Conduct security research into GitLab's AI and agentic surfaces, and participate in defining the
• Build the tooling and automation that scales security research, including agent-assisted

🎯 Requirements

• 7+ years of experience in security research, penetration testing, or offensive security roles
• Hands-on experience discovering and exploiting vulnerabilities.
• Be a subject matter expert (SME) of at least two technical areas impacting the security of the
• Proficiency in one or more of Ruby, Go, Python, TypeScript, or Rust. Experience in AI frameworks is
• Ability to read and analyze code across multiple languages and codebases.
• Understanding of AI attack vectors including prompt injection, agent manipulation, and workflow

🎁 Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave