Staff Corporate Security Engineer

Details

GitLab is an intelligent orchestration platform for DevSecOps. The Corporate Security Engineering team secures the internal environment used by GitLab team members, including endpoints, identity systems, SaaS applications, and platforms that store sensitive internal data.

This role focuses on building secure-by-default controls for endpoints and the SaaS platforms that support them in a fully remote environment, with a strong emphasis on macOS. The role involves making technical decisions around endpoint hardening, automation, and detection, and turning security requirements into scalable, measurable, auditable engineering systems that reduce friction for end users.

The position works across endpoint management, identity, and security operations to improve management of macOS, iOS, Windows, and Linux devices through Infrastructure-as-Code, Terraform, and GitOps workflows.

Responsibilities

• Lead the security architecture of GitLab's endpoint fleet and related infrastructure, with a primary focus on macOS.
• Design and support automation for secure endpoint deployment, configuration, and lifecycle management using code-based workflows.
• Manage endpoint and SaaS security configuration through Terraform, version control, merge requests, continuous integration pipelines, and automated rollouts.
• Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
• Develop patching and software distribution approaches aligned with security, compliance, and operational requirements.
• Partner with Information Technology, Security Operations, and Detection and Response teams to improve endpoint telemetry, detections, and response models.
• Drive process improvements that reduce manual work and lower risk by favoring automation, policy-driven controls, and auditable change management.
• Mentor engineers across Corporate Security and Information Technology.
• Serve as a senior escalation point for complex endpoint security issues.
• Strengthen endpoint security architecture, expand automation, and improve the reliability and auditability of deployed and maintained controls.

Requirements

• Experience designing and delivering endpoint, systems, or corporate security solutions in environments requiring scalable, durable controls.
• Deep knowledge of endpoint management platforms such as Jamf Pro or FleetDM, especially for architecting and securing macOS environments.
• Strong hands-on ability with Terraform and Infrastructure-as-Code practices, including module design, state management, and pipeline-based deployment.
• Experience with GitOps workflows where changes are managed through Git repositories, merge requests, code review, and automated pipelines.
• Strong proficiency in scripting or programming for automation and security tooling, such as Bash, Python, PowerShell, or Go.
• Familiarity with cloud identity providers and directories, including Okta, Google Workspace, and LDAP.
• Ability to communicate clearly, collaborate across distributed teams, and work independently in an all-remote environment.
• Openness to transferable experience from adjacent security, systems, or platform engineering backgrounds, along with a practical and security-focused approach to problem solving.

Benefits

• Benefits supporting health, finances, and well-being.
• Flexible paid time off.
• Team Member Resource Groups.
• Equity compensation and Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental leave.

Compensation

The United States base salary range for this role is $168,000–$238,000 USD. The range applies to United States residents and does not include bonuses, equity, or benefits. Grade level and salary ranges are determined based on interviews and a review of education, experience, knowledge, skills, abilities, equity with other team members, market data, and geographic location.

GitLab roles are remote, with location-based eligibility requirements potentially applying. GitLab welcomes candidates with varying levels of experience and is an equal opportunity workplace.