Software Security Engineer

GitLab GitLab · Enterprise · Canada +1 · Remote · Security Operations

This role focuses on engineering security improvements for the GitLab product, specifically building and maintaining tools to detect and prevent abuse on SaaS platforms. It involves predicting abuse patterns, building prevention systems, and improving agentic AI capabilities within abuse mitigation tools. While a strong software engineering background in Ruby/Rails is required, formal security engineering experience is not. The role also involves collaborating with peers, resolving automation gaps, and creating documentation.

What you'd actually do

  1. Maintain core abuse prevention systems and build new abuse detection rules to identify and prevent evolving abuse patterns such as platform abuse, cryptomining, platform spam and abuse of terms of service
  2. Maintain and build new capabilities in our in-house abuse platform
  3. Improve and expand agentic AI capabilities in our abuse mitigation tools
  4. Collaborate with peers to deliver safety improvements for the GitLab product
  5. Resolve automation gaps and create efficient, automated processes
  6. Create and maintain documentation such as runbooks and procedures

Skills

Required

  • Strong software development skills with experience in Ruby/Rails
  • Comfortable working in an all remote environment where results and impact matter above hours worked
  • Interest in “thinking like a hacker” and defending against attacks with an “automation first” mindset
  • Interest in cloud native development (Google Cloud Platform (GCP) and/or AWS)
  • Interest in handling trust and safety security incidents (platform abuse, cryptomining, platform spam)

What the JD emphasized

  • agentic AI capabilities

Other signals

  • Improve and expand agentic AI capabilities in our abuse mitigation tools
  • The Trust and Safety team relies on automations, LLM aided predictive analysis, and user behavior analysis to proactively detect and prevent abuse on the Gitlab platform.