Security Incident Response Engineer — 4‑Day Week (Remote)

Triwill Group; Australia; Remote; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Equity Compensation & ESPP

Growth and Development Fund

Parental Leave

Employee Resource Groups

Job summary

GitLab is seeking an Intermediate Security Engineer for its Security Incident Response Team (SIRT). The role operates on a compressed 4-day work week with Sunday–Wednesday shifts to provide 24/7/365 coverage.

You'll detect and respond to incidents, explore automation tools, and help strengthen detection and response capabilities across the platform. You’ll work on securing GitLab.com and the company, collaborating with Security Operations globally while developing hands-on expertise with our

Qualifications

• Lead security incident response in our 24/7 global rotation, managing incidents from detection through containment and recovery.
• Create and maintain comprehensive incident response documentation, including runbooks and standard procedures.
• Conduct post-incident analysis through RCA and lessons‑learned reviews to strengthen our incident response program.
• Design and implement automated security processes to improve operational efficiency and reduce manual intervention.
• Drive continuous improvement by identifying security gaps and implementing advanced detection and response capabilities.
• Collaborate across GitLab teams to develop new security capabilities and deliver technical projects that enhance our infrastructure.

Responsibilities

• Lead security incident response in our 24/7 global rotation, managing incidents from detection through containment and recovery
• Create and maintain comprehensive incident response documentation, including runbooks and standard procedures
• Conduct post‑incident analysis through RCA and lessons‑learned reviews to strengthen our incident response program
• Design and implement automated security processes to improve operational efficiency and reduce manual intervention
• Drive continuous improvement by identifying security gaps and implementing advanced detection and response capabilities
• Collaborate across GitLab teams to develop new security capabilities and deliver technical projects that enhance our infrastructure

Job description

GitLab is seeking an Intermediate Security Engineer for its Security Incident Response Team (SIRT). The role operates on a compressed 4-day work week with Sunday–Wednesday shifts to provide 24/7/365 coverage.

You'll detect and respond to incidents, explore automation tools, and help strengthen detection and response capabilities across the platform. You’ll work on securing GitLab.com and the company, collaborating with Security Operations globally while developing hands-on expertise with our