Senior Security Engineer, Security Incident Response Team (SIRT) - EMEA

ABOUT THE ROLE As a Senior Security Engineer on GitLab's Security Incident Response Team (SIRT), you will play a critical role in defending GitLab.com and the broader GitLab environment against evolving security threats. You will lead high-impact incidents and investigations, drive continuous improvements in defense, detection, and response capabilities, and help scale security operations through automation and intelligent workflows. WHAT YOU'LL DO You will be responsible for leading and coordinating end-to-end incident response for high-severity security events within a 24/7 global on-call model. This includes preparing clear executive communications, investigating complex security incidents across cloud environments, and partnering with Signals Engineering to design and implement detection capabilities. You will also build and enhance automation and AI-assisted workflows to improve triage, investigation speed, and response consistency. Additionally, you will conduct root cause analysis (RCA) and lead post-incident reviews to drive continuous improvement and risk reduction. You will develop and maintain runbooks, playbooks, and operational documentation, and collaborate cross-functionally with various teams during incidents and lead proactive initiatives. You will also mentor other engineers and help elevate the team's overall incident response maturity. WHAT YOU'LL NEED To be successful in this role, you will need strong experience in security incident response and investigations in cloud-first environments. You should have experience using or administering Git/GitLab in a security or engineering context, as well as hands-on experience with SIEM, EDR, and/or detection engineering. You should also be familiar with cloud platforms (AWS & GCP) and have experience building or working with automation (e.g., Python, scripting, SOAR platforms). You should have a strong analytical and problem-solving skills, with the ability to operate effectively during high-severity incidents. Excellent written communication skills are also essential, with a passion for clear, actionable documentation. A growth mindset with a proactive approach to identifying and mitigating security risks is also required. WHY REMOTE As a globally distributed team, you will have the opportunity to work with a diverse group of engineers across multiple regions. You will be part of a team that is at the forefront of security events that impact both GitLab.com and GitLab cloud and corporate environments. You will have the flexibility to work from anywhere and be part of a team that values collaboration, innovation, and continuous learning. BENEFITS GitLab offers a comprehensive benefits package, including a competitive salary, comprehensive health insurance, 401(k) matching, and a generous parental leave policy. You will also have access to professional development opportunities, including training and education programs, and a flexible work environment that allows you to work from anywhere.