Principal Field Security Engineer

GitLab

. Serve as the primary security point of contact for enterprise customer questions, requests, and concerns .

Posted 11/5/2026full-timeRemote • United StatesLead💰 $203,200 - $285,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in information security with a focus on customer-facing roles, contract negotiation, and compliance with security frameworks. Capable of developing security content and providing strategic recommendations to enhance customer security practices and drive revenue growth.

Highest-signal resume keywords

Information Security ExpertiseContract NegotiationSecurity Frameworks KnowledgeCloud Security UnderstandingExceptional Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security FrameworksSOC 2ISO 27001GDPRCCPADevSecOpsRisk AssessmentContract ReviewSecurity Content CreationCustomer Assurance Activities

Soft Skills

CollaborationMentoringProblem SolvingCommunicationNegotiation

Certifications & Qualifications

CISSPCISACISMCCSPISO 27001 Lead ImplementerCIPPCIPM

Industry Keywords

SaaS SecurityRegulatory ComplianceRisk ManagementSecurity PracticesCustomer Assurance

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Serve as the primary security point of contact for enterprise customer questions, requests, and concerns
Join customer and prospect meetings to provide expert guidance on GitLab’s security practices and controls
Build and maintain templates, playbooks, fallback positions, and training to simplify and accelerate negotiations
Facilitate customer assurance activities through the Customer Assurance Activities Service Desk
Provide escalation support for complex security questionnaires, RFPs, and risk assessments
Perform comprehensive contract reviews for customer agreements and vendor relationships
Analyze security and compliance clauses in legal documents
Provide risk-based recommendations and remediation guidance for contractual security requirements
Partner with Legal, Sales, Product, and Procurement teams to negotiate security-related contract terms
Manage escalations, collaborate across teams, and develop solutions to enable business partners to close deals
Document and track contract-related security obligations
Develop internal and external security content, including blog posts, whitepapers, technical standards, and field sales enablement training materials
Track the evolving regulatory landscape and identify solutions for customer trends and improvement areas
Build and strengthen GitLab’s security brand within the industry
Maintain and enhance GitLab’s Trust Center and self-service security resources
Provide strategic recommendations based on customer security concerns in support of revenue growth
Participate in Quarterly Business Reviews to inform product and security roadmap decisions
Mentor and guide Security Assurance team members
Drive continuous improvement of Field Security processes and documentation
Design and implement solutions enabling Sales-facing teams to discuss security topics with customers

Requirements

What you’ll need

10+ years of experience in information security, with at least 5 years in customer-facing security roles
Deep expertise in security frameworks and standards such as SOC 2, ISO 27001/27017/27018/42001, FedRAMP, and NIST CSF
Expertise in GDPR, CCPA, DORA, and EU AI Act
Proven track record of contract negotiation and security/privacy agreement reviews
Exceptional written and verbal communication skills with ability to translate complex technical concepts for diverse audiences
Experience creating security content, including blogs, whitepapers, and presentations
Strong understanding of cloud security, SaaS security models, and DevSecOps practices
Experience working cross-functionally with Sales, Legal, Product, and Engineering teams
Ability to balance security risk with business objectives
Experience speaking at conferences is a plus
Preferred: one or more relevant certifications such as CISSP, CISA, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, or CIPP/CIPM
Equivalent demonstrated experience is equally valued

Benefits

Comp & perks

Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave