Senior Software Engineer, Code Security

GitLab

. Act as the directly responsible individual for team initiatives from design through delivery .

Posted 10/10/2026full-timeRemote • United States, CanadaSenior💰 $139,200 - $235,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and testing production code in systems languages like Go and Rust, with a strong focus on application security and vulnerability research. Capable of mentoring engineers and effectively communicating technical solutions in a remote, asynchronous environment.

Highest-signal resume keywords

Go ProgrammingRust ProgrammingApplication SecurityVulnerability ResearchCI/CD

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Production Code TestingDetection Rule WritingAI-Driven AnalysisSystems Language ProficiencyAutomated Remediation

Soft Skills

Self-MotivationOrganizational SkillsClear CommunicationMentoring

Tools & Technologies

GitLabPackage ManagersDependency ManagementCI JobsCommand-Line Tools

Industry Keywords

OWASP Top 10CWESoftware Supply ChainCode ReviewPerformance Optimization

Tech Stack

Tools & technologies

MavenPythonRubyRustGo

About the role

Key responsibilities & impact

Act as the directly responsible individual for team initiatives from design through delivery
Bring systems built by one engineer to team ownership through documentation, tests, and shared review
Design and ship analyzers combining deterministic analysis with AI-driven analysis
Build evaluation harnesses measuring false positives and missed findings against benchmark applications
Develop detection rules mapped to CWE and test fixtures
Package analyzers for CI jobs, AI agent workflows, and command-line tools using GitLab security report formats
Design and ship manifest, lockfile, and SBOM parsing across ecosystems and formats
Extend automated remediation that turns security advisories into dependency update merge requests
Solve high-scope technical problems and improve quality, security, and performance with cross-functional and partner teams
Mentor Intermediate engineers through code review and pairing
Participate in on-call rotations for product, security, and urgent engineering issues

Requirements

What you’ll need

Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations, with the judgment to know when output is trustworthy
Substantial professional experience writing and testing production code in a systems language, particularly Go and/or Rust, with depth in at least one
Willingness to work across Go, Rust, Ruby, and Python
Familiarity with package managers and dependency management in one or more ecosystems, such as npm, Maven, pip, Bundler, or Cargo
Demonstrated application security experience, such as vulnerability research, secure code review, or writing detection rules
Fluency with OWASP Top 10, CWE, and the software supply chain
Track record of taking ownership of ambiguous problems and shipping with minimal guidance
Self-motivation and organizational skills suited to a remote, largely asynchronous environment
Capacity to communicate clearly and concisely about technical problems
Ability to write design proposals that bring a team to a decision
Helpful: experience evaluating AI-driven detection against labeled data, performance optimization at scale, program analysis, web/mobile application frameworks, containerized workflows, and CI/CD

Benefits

Comp & perks

Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave