Principal Security Researcher – AI-Driven DevSecOps

GitLab; United Kingdom; On-site; GBP 150,000 - 203,000; Full time

Benefits offered by this job

Flexible PTO

Equity & ESPP

Growth & Development Fund

Parental Leave

Job summary

GitLab is seeking a Principal Security Researcher to join the Application Security team and conduct cutting-edge security research on its AI-powered DevSecOps capabilities. You will lead hands-on testing, develop novel methodologies for AI agent security, and translate findings into actionable security improvements across the platform.

You will work with the GitLab DevSecOps platform, AI workflows, and agentic surfaces to push the boundaries of security research while mentoring others and

Qualifications

• 10+ years of experience in security research or offensive security
• Proficiency in two or more languages among Ruby, Go, Python, TypeScript or Rust
• Strong knowledge of AI frameworks and AI attack vectors including prompt injection and workflow exploitation
• Ability to lead security research projects and drive remediation with cross-functional teams
• Excellent written communication and the ability to translate findings into risk assessments
• Nice to Have: published research or conference talks; distributed systems background; GitLab experience

Responsibilities

• Conduct and lead security research projects across multiple domains
• Identify novel, systemic vulnerabilities and chained weaknesses in GitLab
• Validate vulnerabilities with hands-on testing and PoCs
• Assess AI/security threats and define remediation requirements
• Lead integration of security research into engineering roadmaps
• Develop tooling for scalable security research and agent-assisted discovery
• Review open-source dependencies and coordinate responsible disclosure
• Mentor and advise other teams and contributors
• Share knowledge with the security community
• Shape team and sub-department roadmaps

Skills

Security research

Penetration testing

Vulnerability discovery

AI security

Code analysis

AI frameworks

Cross-functional leadership

Communication

Remediation guidance

Mentoring

Tools

Ruby

Go

Python

TypeScript

Rust

Job description

GitLab is seeking a Principal Security Researcher to join the Application Security team and conduct cutting-edge security research on its AI-powered DevSecOps capabilities. You will lead hands-on testing, develop novel methodologies for AI agent security, and translate findings into actionable security improvements across the platform.

You will work with the GitLab DevSecOps platform, AI workflows, and agentic surfaces to push the boundaries of security research while mentoring others and