GitLab Logo

GitLab

Staff Product Designer, Security & Compliance

Posted 2 Hours Ago
Be an Early Applicant
Easy Apply
Remote
3 Locations
Senior level
Easy Apply
Remote
3 Locations
Senior level
Lead end-to-end design for Security & Compliance across the software supply chain, translating complex security concepts into clear user experiences, contributing to the design system, partnering with PMs and engineering, conducting research, and mentoring other designers.
The summary above was generated by AI

GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating human progress. Our platform unites teams and organizations, breaking down barriers and redefining what's possible in software development. Thanks to products like Duo Enterprise and Duo Agent Platform, customers get AI benefits at every stage of the SDLC. 

The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software.

Staff Product Designer, Security and Compliance

GitLab is seeking a Staff Product Designer to lead design for complex initiatives, mentor fellow designers, and elevate the craft and quality of our Security experience.

About the Role

As a Staff Product Designer for Security & Compliance, you'll lead design for complex security experiences that help organizations protect their software supply chain, manage vulnerabilities, and meet compliance requirements. This role sits at the intersection of deep technical security concepts and user-centered design—translating intricate workflows into clear, usable experiences for developers and security teams.

Your initial focus will be on Software Supply Chain Security (provenance and attestation, signing and verification, dependency firewall, SBOM, and malicious package detection). Over time, your work will span the broader Security & Compliance portfolio, including application security scanners, policy governance, vulnerability management, and agentic orchestration. You'll partner closely with Product Management and Engineering to ensure independently-owned features connect into coherent customer workflows.

This role requires deep systems thinking. Security decisions ripple across the platform—from CI/CD pipelines to registries to deployment. You'll define interaction patterns that scale across product areas, contribute foundational components to our Pajamas Design System, and help establish the design language for how GitLab communicates risk, trust, and compliance status to users.

Staff designers are key culture carriers who model collaboration, iterative ways of working, and high craft standards while mentoring other designers in the organization.

 

What You’ll Do

 

  • Lead design for security and compliance experiences – Drive end-to-end design for complex security workflows across the software supply chain, including application security scanner, dependency firewall, SBOM, malicious package detection, vulnerability triage, and agentic orchestration. Define both tactical solutions for immediate user problems and strategic patterns that connect to longer-term platform vision.
  • Translate technical complexity into clarity – Partner with subject matter experts to transform technical complexity into accessible, value-focused experiences for different user types—from security practitioners to developers who need security integrated seamlessly into their workflow.
  • Partner cross-functionally –  Coordinate across multiple security product groups to align on cohesive experiences. Work closely with Product Managers and Engineering Managers to shape priorities, scope MVCs, and ensure design intent is maintained through development. 
  • Elevate craft and quality – Demonstrate excellence in interaction design, visual design, and systems thinking. Raise the quality bar through thoughtful feedback in design reviews and by modeling high standards in your own work.
  • Contribute to the design system – Actively contribute to Pajamas by identifying reusable patterns, proposing new components, and ensuring your group’s work extends and adheres to system standards.
  • Mentor and support others – Coach Product Designers and Senior Product Designers through pairing, design critiques, and knowledge sharing. Help onboard new team members and contribute to a collective team culture.
  • Ground work in research – Conduct usability studies, competitor evaluations, and formative research. Collaborate with UX Research on problem validation and incorporate insights to fulfill user and business needs.

 

What You’ll Bring

  • Demonstrated ability to lead design on complex workflows that require significant cross-functional collaboration
  • Strong portfolio showing end-to-end product design work, from problem framing through shipped solutions
  • Experience with security, compliance, DevSecOps, or developer-focused B2B SaaS products
  • Experience mentoring designers and elevating team craft
  • Ability to communicate complex technical topics in clear, value-focused ways for different audiences
  • Excellent communication skills and the ability to present work, articulate rationale, and facilitate alignment
  • Systems thinking and experience contributing to or working with design systems
  • Experience working in remote, distributed teams
  • Proficiency with Figma and prototyping tools


About GitLab

GitLab is the most comprehensive AI-powered DevSecOps platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world.

As an all-remote company since day one, we hire globally and support flexible work. We offer competitive compensation, equity, benefits, and unlimited PTO.

For full role responsibilities and expectations, see the Staff Product Designer role description in our handbook.

GitLab is an equal opportunity employer committed to creating an inclusive environment for all employees.

The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.

United States Salary Range
$125,000$200,000 USD
How GitLab will support you
  • Benefits to support your health, finances, and well-being
  • Flexible Paid Time Off 
  • Team Member Resource Groups
  • Equity Compensation & Employee Stock Purchase Plan
  • Growth and Development Fund
  • Parental leave 
  • Home office support

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.

Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.  

Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.

GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.

Top Skills

Figma,Prototyping Tools,Pajamas Design System,Devsecops,Ci/Cd,Sbom,Application Security Scanners,Dependency Firewall,Vulnerability Management

Similar Jobs at GitLab

3 Hours Ago
Easy Apply
Remote
30 Locations
Easy Apply
Senior level
Senior level
Cloud • Security • Software • Cybersecurity • Automation
Lead the design and implementation of GitLab's authentication infrastructure, focusing on security and performance. Collaborate with multiple teams to ensure effective identity services and support a transition to zero-trust architecture.
Top Skills: Ai-Powered DevsecopsCi/CdDistributed SystemsEnvoyGitopsGoGoogle SpannerGrpcHaproxyKubernetesNginxPostgresProxy TechnologiesRdsRest ApisRustTraefik
3 Hours Ago
Easy Apply
Remote
31 Locations
Easy Apply
Mid level
Mid level
Cloud • Security • Software • Cybersecurity • Automation
The role involves developing features for GitLab's AI-powered platform, advocating for quality improvements, and collaborating within a remote team.
Top Skills: AIGraphQLJavaScriptPythonRspecRuby On RailsVue
2 Days Ago
Easy Apply
Remote
31 Locations
Easy Apply
Senior level
Senior level
Cloud • Security • Software • Cybersecurity • Automation
As a Principal Database Engineer, you will architect scalable PostgreSQL solutions, ensuring data reliability, performance, and collaborating with teams to build a robust data platform for GitLab's growth.
Top Skills: ElasticsearchPostgresTypescript

What you need to know about the Calgary Tech Scene

Employees can spend up to one-third of their life at work, so choosing the right company is crucial, not just for the job itself but for the company culture as well. While startups often offer dynamic culture and growth opportunities, large corporations provide benefits like career development and networking, especially appealing to recent graduates. Fortunately, Calgary stands out as a hub for both, recognized as one of Startup Genome's Top 100 Emerging Ecosystems, while also playing host to a number of multinational enterprises. In Calgary, job seekers can find a wide range of opportunities.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account