Gitlab
Enhance GitLab's security detection capabilities by conducting vulnerability research, improving SAST/DAST tools, curating advisory databases, and collaborating on product development in an all-remote environment.
Kueski
Join Kueski as a Senior Fullstack Software Engineer and contribute to innovative financial services, with flexible remote work options and equity in a fast-growing company.
Gitlab
Provide professional services including installation, migration, training, and advisory support using IaC tools like Terraform and Ansible. Collaborate with customers and internal teams to ensure customer success and enhance GitLab's offerings.
Cyberhaven
Join Cyberhaven as a Professional Services Engineer and help clients integrate our data security solutions, troubleshoot technical challenges, and deliver high-quality services while staying updated on industry trends.
ElevenLabs
Full-Stack engineer for voice technology company developing audio AI solutions
CoinsPaid
Business System Analyst at CoinsPaid: Design and implement impactful features using their tools, collaborate with passionate colleagues, and shape the future of AI.
Goodnotes
Lead engineer at Goodnotes: build new products, partner with educators, and shape tech roadmaps.
Goodnotes
Lead engineering efforts at Goodnotes, building scalable solutions with modern tech stacks, and drive user growth and engagement.
Goodnotes
Lead engineer at Goodnotes, build new products from scratch with modern tech stacks, flexible remote work options, and meaningful equity.
Goodnotes
Lead engineer role at Goodnotes, building new products with modern tech stacks, flexible remote work, and opportunities for growth.
Welocalize
English into Finnish Medical Translator Freelance Opportunity - Translate medical content with original meaning conveyed using XTM/Phrase CAT tool.
Makersite GmbH
Join Makersite as a QA Engineer to drive quality assurance in our B2B SaaS platform for sustainable product development. Utilize your expertise in automation testing, Python, Cypress, and TypeScript to ensure high-quality software solutions.
Vonage
Release Train Engineer (RTE) with SAFe Certified status, leading Agile transformations and optimizing team performance using Jira.
BPM LLP
Delivery NetSuite Consultant – Advanced Manufacturing at Caravel BPM Technology Solutions
UpGuard
Inbound Business Development Manager at UpGuard: Lead EMEA BDR team, develop scalable lead qualification frameworks, partner with Marketing, and drive pipeline growth.
1Password
EMEA Manager of Business Development at 1Password: Lead BDR team, drive business growth, build talent pool
Bitfinex
Join Bitfinex as a Business Development Associate to support market penetration and build relationships in Vietnam's P2P trading space. Collaborate with teams to develop strategies and enhance user engagement while staying ahead in the cryptocurrency industry.
Binance
Lead complex projects at Binance, develop innovative solutions, and drive business growth in the cryptocurrency market.
MGID
Business Development Manager role at MGID, driving sales growth through client relationships and media planning.
brightwheel
Lead a team of BDRs to grow Brightwheel's customer base through strategic pipeline management, coaching, and sales process optimization in a high-velocity SaaS environment.
Gitlab
As a Vulnerability Research Engineer at GitLab, you will be at the forefront of our R&D efforts within the Engineering department. Your role involves enhancing GitLab's security detection capabilities across SAST, DAST, Secret Detection, and Composition Analysis. You'll conduct research on software vulnerabilities, exploitation methods, and novel approaches in software security to improve our security products. Additionally, you'll curate advisory databases for dependency scanning, develop benchmarks to test product efficacy, and respond to customer inquiries. GitLab offers a remote work environment with benefits including flexible PTO, equity compensation, growth opportunities, and home office support.
An overview of this role
You'll be at the forefront of our R&D efforts within our Engineering department in this role. You’ll be expected to focus on improving GitLab’s security detection capabilities in our Application Security Testing stage groups. This includes SAST, DAST, Secret Detection and Composition Analysis, and future products.
Vulnerability Research Engineers perform research to analyze software vulnerabilities, exploitation methods, track new vectors, discover novel methods and approaches in software security, and apply this knowledge to the security products and GitLab itself.
What You’ll Do
Carry out research and come up with proofs of concepts that affect the security products and GitLab, including SAST, DAST, Secret Detection and Composition Analysis.
Curate advisory databases for dependency scanning. This is a semi-automatic task that includes auditing/reviewing, editing existing and adding new advisories to the database while, at the same time, trying to automate repetitive tasks away as much as possible.
Build/develop benchmarks to test the efficacy of scanning and detection products to constantly improve quality of results.
Measure and Improve the efficacy of scanning and detection products over time.
Write detailed technical reports.
Assess security product output results and conduct root cause analysis to improve efficacy.
Respond to internal and external customer inquiries on vulnerabilities and related topics.
What You’ll Bring
3+ years of direct experience in developing and improving vulnerability detection products in the context of web security.
Knowledge of the vulnerability management process.
Knowledge of software composition analysis (SCA) and software supply chain ecosystems.
Experience with source code analysis, static application security testing (SAST), and dynamic application security testing (DAST) along with benchmarking experience testing the efficacy of these products.
Knowledge about compilers, compiler design and construction.
Experience developing automated web security testing/analysis tools.
Experience in product development.
You have a passion for security and open source, and enjoy collaborating with cross-functional teams.
About the team
The Vulnerability Research team works closely with GitLab Security, Development, and Product teams to build, tune and improve the efficacy of the security products that are integrated into GitLab.
Thanks to our Transparency value, you can get a better sense of what the team does daily by browsing some of our past information sharing sessions.
How GitLab will support you
All remote, asynchronous work environment
Home office support
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
