Senior Backend Engineer, Code Security & AI (Remote)

GitLab; Canada; Remote; CAD 140,000 - 200,000; Full time

Job summary

GitLab is seeking a Senior Backend Engineer for the Security Factory: Code Security team to advance code-level security across the DevSecOps platform. You will work on dependency analysis, SBOMs, and automated remediation, integrating AI-assisted tooling into secure software development.

Youll collaborate across teams, mentor engineers, and contribute to scalable security analyzers, with remote-first practices and a focus on trust, performance, and robust security outcomes.

Qualifications

• Experience building LLM tooling and evaluations.
• Production code experience in Go or Rust, with depth in at least one.
• Familiarity with package managers and dependency management across ecosystems (npm, Maven, pip, Bundler, Cargo).
• Demonstrated application security experience, including vulnerability research, secure code review, or writing detection rules; familiarity with OWASP Top 10 and CWE.

Responsibilities

• Act as the DRI for team initiatives from design through delivery.
• Document, test, and hand over systems to team ownership.
• Design and ship analyzers combining deterministic analysis with AI reasoning.
• Package analyzers for CI, AI workflows, and CLI tools with standard security reports.
• Parse manifests, lockfiles, and SBOMs and extend support to new ecosystems.
• Support automated remediation through dependency update merge requests.
• Tackle high-scope problems and advocate for quality, security, and performance.
• Mentor Intermediate engineers via code reviews and pairing.
• Participate in on-call rotations for operations support.

Skills

LLM tooling

Go

Rust

Ruby

Python

Dependency management

NPM

Maven

Pip

Bundler

Cargo

OWASP Top 10

CWE

Vulnerability research

Secure code review

Tools

Docker

Job description

GitLab is seeking a Senior Backend Engineer for the Security Factory: Code Security team to advance code-level security across the DevSecOps platform. You will work on dependency analysis, SBOMs, and automated remediation, integrating AI-assisted tooling into secure software development.

Youll collaborate across teams, mentor engineers, and contribute to scalable security analyzers, with remote-first practices and a focus on trust, performance, and robust security outcomes.