Staff Corporate Security Engineer

ABOUT THE ROLE GitLab is the intelligent orchestration platform for DevSecOps, trusted by more than 50 million users and half of the Fortune 100 to ship secure software faster. As a Staff Corporate Security Engineer you will lead the design and implementation of secure‑by‑default controls for the endpoint fleet that powers our fully remote workforce. Your focus will be on macOS, but you will also shape policies for iOS, Windows and Linux, ensuring that every device is hardened, monitored and compliant through code‑centric automation. In this senior role you will own the technical vision for endpoint security architecture, drive automation, and translate security requirements into scalable, auditable engineering systems that reduce friction for end users while maintaining the highest level of protection. WHAT YOU'LL DO - Lead the security architecture of GitLab’s endpoint fleet, establishing a secure baseline for macOS, iOS, Windows and Linux. - Design, build and maintain Terraform modules and GitOps workflows that automate secure deployment, configuration and lifecycle management of endpoints and SaaS platforms. - Develop and refine patching, software distribution and compliance processes that meet operational, security and regulatory needs. - Partner with Information Technology, Security Operations and Detection & Response teams to enhance telemetry, detection rules and incident response for endpoints. - Drive process improvements that replace manual tasks with policy‑driven automation, ensuring all changes are auditable and version controlled. - Mentor junior engineers across Corporate Security and IT, serving as a senior escalation point for complex endpoint security challenges. WHAT YOU'LL NEED - Extensive experience designing and delivering enterprise endpoint or corporate security solutions at scale. - Deep expertise in macOS endpoint management platforms such as Jamf Pro or FleetDM, and a proven track record of architecting secure environments. - Advanced proficiency with Terraform and Infrastructure‑as‑Code, including module design, state management and pipeline integration. - Hands‑on experience with GitOps workflows, code review, merge requests and continuous integration pipelines. - Strong scripting or programming skills in bash, Python, PowerShell or Go for automation and tooling. - Familiarity with cloud identity providers and directories, including Okta, Google Workspace and LDAP. - Excellent communication and collaboration skills, with a demonstrated ability to work independently in a distributed, all‑remote setting. - A pragmatic, security‑focused mindset that brings transferable experience from adjacent security, systems or platform engineering roles. WHY REMOTE GitLab’s culture is built around a distributed, asynchronous model that empowers employees to work from anywhere while staying connected through real‑time collaboration tools and regular virtual touchpoints. The remote environment offers flexible scheduling, allowing you to align your work hours with your personal rhythm and the global team’s needs. Our remote‑first approach eliminates commuting, reduces overhead, and fosters a high‑performance culture where focus, productivity and innovation thrive. BENEFITS Competitive salary and equity package. Comprehensive health, dental and vision coverage for you and your dependents. Generous paid time off, parental leave and a flexible vacation policy. Remote work stipend to support home‑office setup and utilities. Dedicated learning budget for courses, certifications and conferences. Access to a global network of peers, mentorship programs and continuous knowledge sharing.