Intermediate Software Engineer, Product Security Engineering

View full description

Requirements:

• 2+ years of software development experience with Ruby on Rails or similar web frameworks.
• Understanding of web application development and API design.
• Demonstrable experience with Git and modern development workflows.
• Familiarity with automated testing and CI/CD practices.
• Basic understanding of web application security concepts (such as OWASP Top-10 and similar).
• Strong collaboration skills and ability to work with cross-functional teams.
• Excellent written and verbal communication skills.
• Experience contributing to production applications.

Responsibilities:

• Contribute to GitLab's core product by implementing security features and enhancements.
• Help integrate custom security tooling into GitLab's product, working closely with Security and Product teams.
• Develop automation solutions that help scale Product Security team processes.
• Build self-service security tools that enable Engineering teams to make secure decisions.
• Participate in code reviews, architectural discussions, and technical planning.
• Collaborate with Product Security teams to understand their requirements and implement solutions.
• Write clear documentation for the features and tools you develop.
• Participate in incident response when security-related issues arise.