Jobs at GitLab

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead GitLab’s talent brand strategy and employer value proposition across the candidate journey. Develop integrated recruitment marketing campaigns, editorial content, recruiter resources, events, and scalable content systems. Partner with Talent Acquisition, Marketing, Communications, and business leaders to support hiring priorities and improve candidate experiences. Use performance data, audience insights, feedback, and market trends to evaluate campaigns, guide priorities, and increase candidate engagement and conversion.

The Talent Brand Manager will shape GitLab’s employer brand through recruitment marketing, storytelling, campaigns, and candidate education. Responsibilities include translating the employer value proposition into messaging, creating cross-channel campaigns and team-member stories, improving candidate journey touchpoints, analyzing funnel and engagement metrics, and partnering with Talent Acquisition and cross-functional stakeholders. The role also manages projects and external partners while improving talent brand processes, reporting, and operations in a fully remote environment.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Provides cross-team technical leadership for complex backend initiatives, modular architecture, monolith modernization, API and platform standards, production operations, and AI-assisted engineering adoption. Designs shared patterns for services, data, eventing, security, testing, observability, deployment, and reliability. Partners with Product and Engineering leadership, mentors engineers, participates in incident response, and drives technical strategy without formal authority.

Build, test, ship, and operate production backend features with minimal guidance. Design APIs, background jobs, integrations, data models, migrations, and bounded services while maintaining security, performance, observability, and reliability. Review code, improve automated testing, investigate production issues, address technical debt, participate in operational support, and collaborate asynchronously with product, frontend, infrastructure, and security teams. Use AI coding tools responsibly by validating and correcting generated output.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Owns GitLab’s enterprise pricing, packaging, monetization, and commercialization strategy. Develops pricing programs, enterprise agreements, bundling, channel and cloud marketplace structures, discounting frameworks, and competitive deal plays. Partners with Product, Sales, Finance, Marketing, Deal Desk, Revenue Operations, and partners to implement scalable commercial programs. Creates pricing enablement materials, makes data-backed recommendations, influences senior stakeholders, and documents decisions in an asynchronous, globally distributed environment.

As Principal Product Manager, you'll define product strategy for GitLab's AI models, focusing on custom and self-hosted AI capabilities, collaborating with engineering, and ensuring alignment with company strategy.

Leads technical direction and develops fullstack purchase experiences using Ruby on Rails and Vue.js. Designs resilient transactional flows, integrates billing and CRM systems, improves reliability and rollout safety, mentors engineers, reviews code, reduces technical debt, and participates in incident response. Partners with Product, Design, Billing, and Support to improve GitLab’s purchase, subscription, discount, and upgrade workflows.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

Lead renewal analytics and forecasting for direct and channel motions. Build renewal health scoring and predictive models, improve Clari and SFDC processes, surface churn and expansion insights, partner with RevOps/Finance/IT, automate reporting, and present recommendations to senior stakeholders to improve retention and renewal performance.

Lead pricing strategy and packaging across GitLab’s SaaS portfolio, including AI and usage-based products. Analyze market, competitor, customer, and usage data; build financial models; evaluate monetization opportunities; support product launches and SKU mapping; monitor post-launch results; and influence senior leaders across Product, Marketing, Finance, Sales, Deal Desk, and fulfillment.

Support and maintain a 10+ tool revenue tech stack, troubleshoot and provision users, coordinate vendors, identify and implement integrations and automations, build reporting and documentation, and partner cross-functionally to improve GTM processes and adoption.

Build and improve GitLab authentication services across Ruby on Rails and Go codebases. Design token issuance, validation, identity, access management, passwordless authentication, workload identity federation, and secure automation features. Migrate authentication paths to GATE while supporting multiple deployment models, address reported vulnerabilities, optimize performance, review code, establish engineering standards, and collaborate on complex projects in a remote, asynchronous environment.

Lead complex, end-to-end technical programs across product, engineering, data, and security teams. Translate strategic priorities into roadmaps, manage risks and dependencies, coordinate distributed teams, and align executive stakeholders. Drive AI platform, data, infrastructure, security, reliability, and enterprise adoption initiatives from inception through launch and continuous improvement while ensuring predictable execution and transparent communication.

Partners with engineering and finance leaders on cloud and AI infrastructure investments. Manages expenses, forecasts, accruals, allocations, reconciliations, variance analysis, and month-end close. Builds financial models, analyzes cloud billing and operational data, supports annual planning, and translates findings into recommendations. Collaborates cross-functionally with procurement, accounting, product, and engineering teams while using AI tools to automate finance workflows in a remote, asynchronous environment.

Lead cross-functional Developer Experience initiatives across six teams, contributing hands-on backend code in Ruby and Go. Improve testing reliability, test coverage, CI/CD pipelines, logging standards, and development environments. Partner with engineering, platform, product, and infrastructure teams to identify friction, remove systemic bottlenecks, shape the Developer Experience Platform strategy, and foster continuous engineering improvement.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.