Staff Product Security Architect

GitLab is an intelligent orchestration platform for DevSecOps, trusted by more than 50 million registered users and over 50% of the Fortune 100. The Security Platforms and Architecture team at GitLab addresses complex security challenges, comprising Security Architecture, Security Research, and Application Security units.

• In-depth experience in application security architecture, including authentication, authorization, privilege escalation, multi-tenant isolation, and trust boundary analysis.
• Experience securing distributed systems, including service-to-service authentication and secrets handling.
• Working knowledge of software supply chain security including build and release integrity, artifact provenance, and dependency risk.
• Proven track record of proactive architecture work identifying risks before incidents.
• Ability to build trusted relationships with engineering leadership and influence technical direction.
• Experience defining security standards or patterns adopted by teams without compulsion.
• Ability to operate strategically while remaining hands-on, including code reading and prototyping.
• Clear written communication skills to effectively argue security to engineering audiences.
• Insight into authoring and delivering security guidance for AI coding tools.

• Partner with engineering and product leadership to anticipate security problems.
• Lead security architecture and design for strategic initiatives.
• Identify, assess, and prioritize systemic security risks and act as Security Owner for high-priority items.
• Codify recurring security decisions into reusable artifacts integrated into developer and AI coding tool workflows.
• Build proofs of concept and prototypes to facilitate security requirement implementation.
• Conduct security architecture reviews for large or strategic projects.
• Threat model new and existing systems, enabling teams to threat model their work.
• Collaborate with Security Research on proactive risk exploration.
• Anticipate emerging security challenges and propose architectural solutions.
• Mentor security engineers and represent security architecture to engineering audiences.

GitLab is an equal opportunity employer and affirmative action employer, prohibiting discrimination based on legally protected characteristics. Candidates with disabilities or special needs may request accommodations during the recruiting process. The role is remote, with location-based eligibility potentially applicable; Talent Acquisition can assist with location questions.