Senior Threat Intelligence Engineer

Details

GitLab is seeking a seasoned Threat Intelligence Engineer to join its Security Operations department as a Senior Security Engineer, Threat Intelligence. The role will provide actionable intelligence to support proactive security decisions, with a focus on threats to GitLab and the software supply chain. The position will administer and enhance the Threat Intelligence Platform, expand intelligence collection through automation and AI, analyze real-world attacks, conduct attributions, and help mature the threat intelligence program.

The role is the sole dedicated threat intelligence position on the team and will collaborate with Security Operations engineers, security, infrastructure, and product teams. The position reports to a Security Manager based in Australia.

Responsibilities

• Monitor the threat landscape, identify and analyze risks relevant to GitLab, and raise awareness through ad hoc Flash Reports.
• Administer the Threat Intelligence Platform.
• Build and maintain open-source, proprietary, and internal intelligence collection pipelines.
• Support incident response through malware analysis and threat actor tracking.
• Collaborate on Purple Team Flash Operations to turn emerging threats into exercises that validate and improve defensive capabilities.
• Build relationships with industry peers, share intelligence, and collaborate on emerging threats.
• Write code, leverage AI, and build automation to improve team processes and efficiency.

Requirements

• Proven experience delivering actionable intelligence that has meaningfully impacted an organization's security.
• Experience working with a Threat Intelligence Platform and managing ingested and exported threat feeds.
• Experience researching adversaries using OSINT and structured analytical techniques.
• Ability to automate tasks by writing basic scripts or programs, preferably using Python.
• Excellent written and verbal communication skills, with the ability to explain complex topics clearly and concisely.
• Experience reverse engineering malware, particularly macOS and Linux malware or malware delivered through code repositories, is valuable.
• Public examples of threat intelligence-related blogs or open-source work are valuable.

Team

Security Operations includes SIRT, Trust & Safety, Signal Engineering, Red Team, and Security Logging. The role is remote, with hiring eligibility listed for Canada, India, and the United States.

Benefits

• Benefits supporting health, finances, and well-being.
• Flexible paid time off.
• Team Member Resource Groups.
• Equity compensation and Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental leave.

Salary

The United States base salary range is $140,000–$200,000 USD. The range applies to United States residents and excludes bonuses, equity, and benefits.