Intermediate Security Engineer, Vulnerability Management

The GitLab DevSecOps platform empowers 100,000+ organizations to deliver software faster and more efficiently. We are one of the world’s largest all-remote companies with 2,000+ team members and values that foster a culture where people embrace the belief that everyone can contribute. Learn more about Life at GitLab.

An overview of this role

The GitLab Vulnerability Management team is responsible for building and executing on an efficient, impactful vulnerability management program across GitLab’s product and service offerings. We are looking for an automation-focused security engineer to join us to execute on our vulnerability management program in the FedRAMP environment, and to help us continue to build a world-class program. As an intermediate security engineer, you will manage and contribute to our vulnerability management tools, as well as work cross-functionally to help GitLab teams execute on the vulnerability management program. You will have the opportunity to learn about, and have impact upon the complete range of vulnerability types across our cloud environments and the GitLab product, with the goal of providing customers with a secure DevSecOps platform they can trust.

Find out more about the Vulnerability Management team and responsibilities here:

• Vulnerability Management
• Product Security

What You’ll Do  

• Support the development, implementation, and management of our vulnerability management tooling in the FedRAMP environment, ensuring all services meet FedRAMP requirements.
• Own and execute on a vulnerability management strategy across all GitLab cloud environments, our products, and their dependencies.
• Collaborate cross-functionally to define, communicate, and measure the patch management strategy.
• Provide the visibility and tooling necessary to continually assess and iterate on security best practices for our cloud environments and the Gitlab product.
• Create documentation such as runbooks and procedures 
• Support other Product Security efforts where practical.
• Support Security Operations in tracking new and emerging threats to our environments.
• Ensure the protection of both GitLab and GitLab customer data.

What You’ll Bring 

• Proof of U.S. citizenship and residency
• Ability to use GitLab
• Demonstrated experience in cloud security, vulnerability management, asset management and related topics.
• Development experience with Ruby, Go, Python.
• Demonstrated experience working collaboratively with cross-functional teams.
• Proficiency to communicate over a text-based medium (Slack, GitLab Issues, Email) and can succinctly document technical details.
• Share our values, and work in accordance with those …