Staff Infrastructure Security Engineer (APAC, EMEA, or US)

ABOUT THE ROLE As a Staff Security Engineer on the Infrastructure Security Team within the Product Security Department at GitLab, you will play a critical role in ensuring the security of our public cloud infrastructure. You will work closely with teams across the organization to define the technical direction for infrastructure security topics, drive business outcomes, and empower critical software factories globally. WHAT YOU'LL DO As a Staff Security Engineer, you will be responsible for leading infrastructure security initiatives, conducting comprehensive security reviews and threat modeling, and setting the team's approach to AI-assisted security engineering. You will also serve as an authoritative technical voice for Infrastructure Security across stakeholders, partner on technical planning and prioritization, and mentor and develop engineers. Key responsibilities include: - Setting architectural patterns, reference implementations, and foundational security automation that shape how infrastructure security is implemented across GitLab - Leading infrastructure security initiatives from problem framing through delivery, scoping ambiguous multi-quarter work into executable streams with clear success criteria - Conducting and leading comprehensive security reviews and threat modeling for complex infrastructure components, identifying systemic risks and driving remediation across affected systems - Setting the team's approach to AI-assisted security engineering, identifying where AI can meaningfully increase leverage and establishing patterns others can adopt - Serving as an authoritative technical voice for Infrastructure Security across stakeholders, translating architectural tradeoffs into clear decisions for engineering teams and senior leadership - Partnering on technical planning, prioritization, and roadmap development to align technical work with business objectives - Mentoring and developing engineers, raising the technical bar and modeling inclusive collaboration WHAT YOU'LL NEED To be successful in this role, you will need to bring a strong background in security for cloud infrastructure, container orchestration, and related infrastructure and data security topics. Proficiency in multiple programming languages, including Go, Python, and Ruby, is required, as well as extensive experience with Infrastructure-as-Code security, policy-as-code, and automated compliance. You should also have hands-on experience applying AI to security workflows and a track record of leading multi-team technical initiatives. WHY REMOTE As a remote-friendly company, GitLab offers the flexibility to work from anywhere, allowing you to maintain a healthy work-life balance and contribute to the company's mission from anywhere in the world. BENEFITS GitLab offers a comprehensive benefits package, including benefits to support your health, finances, and well-being, such as medical, dental, and vision insurance, 401(k) matching, and a generous paid time off policy.