The GitLab DevSecOps platform empowers 100,000+ organizations to deliver software faster and more efficiently. We are one of the world’s largest all-remote companies with 2,000+ team members and values that foster a culture where people embrace the belief that everyone can contribute. Learn more about Life at GitLab .
An overview of this role
Infrastructure Security plays a critical role in GitLab as it holds responsibility for securing the infrastructure components that constitute our public cloud, cloud native, and software pipeline environments. In this high visibility role you’ll be responsible for setting the overall vision and strategy for infrastructure security within GitLab. You’ll work with the broader product security organization to help improve the overall cyber resilience of the GitLab product set for both cloud and self-hosted customers.
Relevant Links:
Infrastructure Security Overview
Security at GitLab
Infrastructure at GitLab
What you’ll do
Develop and implement the infrastructure security team’s vision and strategic roadmap
Own and be responsible for securing
GitLab’s customer-facing infrastructure which encompasses our multi-tenant, Dedicated, government, and on-prem architectures.
Infrastructure that supports GitLab’s software supply chain.
Provide professional guidance and input on infrastructure security within and outside of your team
Collaborate with other security teams in support of
cross-team security efforts
Process improvements
Driving down risk across the organization
Build collaborative cross-functional partnerships with teams across
Infrastructure Engineering
Engineering and Development
Product Management; and
Legal
Manage an existing high performing team of infrastructure security professionals along with hiring new members as appropriate
Lead and mentor your team by
helping grow their skills and experience
fostering a culture of continuous improvement
holding regular 1:1’s
being your team’s role model in terms of exemplifying GitLab company values, positive thinking, and managing conflict
Establish and implement security policies, procedures, standards, and guidelines in support of infrastructure security
This position reports to the VP of Product Security and be expected to
Draft and successfully deliver on quarterly Objectives and Key Results (OKRs)
Align vision and roadmap with the broader product security strategy
What you’ll bring
Experience with:
Public cloud security
Ideally, practical experience with site-reliability engineering
CI/CD at a practitioner level
Google Cloud Platform or Amazon Web Services
Docker, Kubernetes, Cloud Native technologies and Serverless technologies
Managing SaaS infrastructure security related issues especially within regulated environments such as FedRAMP and GDPR
leading and implementing automation implementations in the service of infrastructure security (things like CSPM, Ansible, Terraform, etc)
Knowledge of:
infrastructure security issues, mitigations, and a solid grasp of the current global threat landscape
Distributed architectures
Systems design at an infrastructure component level
Threat modeling at the infrastructure level
Trends and practices in AI security at the infrastructure level
Strongly skilled in:
communication, including verbal, written
presentation skills to a variety of stakeholders
Collaborating with a global and diverse workforce
Adapting to evolving circumstances, technologies, and strategic priorities, while leading complex initiatives
Managing and developing teams of at least 10 people
Able to:
deliver results that are “good enough” in the face of ambiguity and imperfect knowledge
excel in a remote-only, asynchronous, multicultural, and distributed environment
Alignment with Manager responsibilities as outlined in Leadership at GitLab
The base salary range for this role’s listed level is currently for residents of listed locations only. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, and alignment with market data. See more information on our benefits and equity . Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary. Colorado/Washington pay range $140,000 — $270,000 USD California/New York/New Jersey pay range $140,000 — $270,000 USD
Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .
View Original Job Posting