Remote Intermediate Vulnerability Research Engineer, Application Security Testing: Vulnerability Research

Description:

• GitLab is an open core software company that develops an AI-powered DevSecOps Platform used by over 100,000 organizations.
• The mission of GitLab is to enable everyone to contribute to and co-create the software that powers our world.
• The role of Intermediate Vulnerability Research Engineer focuses on improving GitLab’s security detection capabilities in Application Security Testing, including SAST, DAST, Secret Detection, and Composition Analysis.
• Responsibilities include conducting research to analyze software vulnerabilities, creating proofs of concept, curating advisory databases for dependency scanning, developing benchmarks for testing scanning efficacy, writing detailed technical reports, and responding to customer inquiries on vulnerabilities.

Requirements:

• Candidates must have 3+ years of direct experience in developing and improving vulnerability detection products in web security.
• Knowledge of the vulnerability management process is required.
• Familiarity with software composition analysis (SCA) and software supply chain ecosystems is necessary.
• Experience with source code analysis, SAST, DAST, and benchmarking the efficacy of these products is essential.
• Candidates should have knowledge about compilers, compiler design, and construction.
• Experience in developing automated web security testing/analysis tools is required.
• A background in product development is necessary.
• A passion for security and open source, along with the ability to collaborate with cross-functional teams, is important.

Benefits:

• GitLab offers benefits to support health, finances, and well-being.
• The company provides a fully remote and asynchronous work environment.
• Employees enjoy flexible paid time off.
• Team Member Resource Groups are available to foster inclusion and belonging.
• Equity compensation and an employee stock purchase plan are part of the benefits package.
• A growth and development budget is provided for professional advancement.
• Parental leave is offered to support family needs.
• Home office support is available to assist with remote work setups.