Senior Corporate Security Engineer

Details

GitLab is an intelligent orchestration platform for DevSecOps. The Corporate Security Engineering team secures the internal environment used by GitLab team members, including endpoints, identity systems, SaaS applications, and platforms that store sensitive internal data.

This role focuses on building secure-by-default controls for endpoints and the SaaS platforms that support them across GitLab's fully remote environment, with a strong emphasis on macOS. The position involves making technical decisions around endpoint hardening, automation, and detection, and turning security requirements into scalable, measurable, auditable engineering systems that reduce friction for end users. The role works across endpoint management, identity, and security operations to improve the management of macOS, iOS, Windows, and Linux devices through Infrastructure-as-Code, Terraform, and GitOps workflows.

Responsibilities

• Help lead the security architecture of GitLab's endpoint fleet and related infrastructure, with a primary focus on macOS.
• Design and support automation for secure endpoint deployment, configuration, and lifecycle management using code-based workflows.
• Manage endpoint and SaaS security configuration through Terraform, version control, merge requests, continuous integration pipelines, and automated rollouts.
• Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
• Develop patching and software distribution approaches aligned with security, compliance, and operational requirements.
• Partner with Information Technology, Security Operations, and Detection and Response teams to improve endpoint telemetry, detections, and response models.
• Drive process improvements that reduce manual work and lower risk through automation, policy-driven controls, and auditable change management.
• Mentor engineers across Corporate Security and Information Technology.
• Serve as a senior escalation point for complex endpoint security issues.
• Strengthen endpoint security architecture, expand automation, and improve the reliability and auditability of deployed controls.

Requirements

• Experience designing and delivering endpoint, systems, or corporate security solutions in environments requiring scalable, durable controls.
• Deep knowledge of endpoint management platforms such as Jamf Pro or FleetDM, especially for architecting and securing macOS environments.
• Strong hands-on ability with Terraform and Infrastructure-as-Code practices, including module design, state management, and pipeline-based deployment.
• Experience with GitOps workflows using Git repositories, merge requests, code review, and automated pipelines.
• Strong proficiency in scripting or programming for automation and security tooling, such as Bash, Python, PowerShell, or Go.
• Familiarity with cloud identity providers and directories, including Okta, Google Workspace, and LDAP.
• Ability to communicate clearly, collaborate across distributed teams, and work independently in an all-remote environment.
• A practical, security-focused approach to problem solving and openness to transferable experience from adjacent security, systems, or platform engineering backgrounds.

Team

The Corporate Security Engineering team treats security work as engineering work: building with code, operating through Git, and using reviewable, testable, and auditable workflows by default. The team partners with Information Technology, Security Operations, and Engineering across regions, collaborating asynchronously to build controls that scale across GitLab's all-remote workforce while reducing friction for end users.

Benefits

• Benefits supporting health, finances, and well-being.
• Flexible Paid Time Off.
• Team Member Resource Groups.
• Equity Compensation and Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental Leave.

GitLab welcomes candidates with varying levels of experience and is an equal opportunity workplace.