Senior Security Engineer, Security Incident Response Team

GitLab; United Kingdom; Remote; GBP 60,000 - 80,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Growth and development budget

Equity Compensation & Employee Stock Purchase Plan

Parental leave

Home office support

Job summary

A technology company in the United Kingdom is seeking a Senior Security Engineer to lead incident response and develop automated security processes. The role requires expertise in cloud platforms and SIEM tools, with a strong focus on documentation and proactive security measures. This position offers an all-remote work environment with flexible time off and supportive benefits.

Qualifications

• Ability to learn and lead incident response processes independently.
• Strong willingness to learn programming skills.
• Passion for technical documentation.

Responsibilities

• Lead security incident response in a global rotation.
• Create and maintain incident response documentation.
• Conduct post-incident analysis for improvement.
• Design automated security processes.
• Identify security gaps and drive improvements.
• Collaborate with teams to deliver technical projects.

Skills

Incident response leadership

Experience with SIEM/security logging tools

Cloud platforms (GCP and/or AWS)

Python programming skills

Technical documentation

Proactive identification of security threats

Forensic analysis

Interest in cloud-based security investigations

Job description

Overview

As a Senior Security Engineer on GitLab's Security Incident Response Team (SIRT), you will be on the frontline of protecting both GitLab.com and GitLab the company from security threats.

What You’ll Do

• Lead security incident response in our 24/7 global rotation, managing incidents from detection through containment and recovery
• Create and maintain comprehensive incident response documentation, including runbooks and standard procedures
• Conduct post-incident analysis through RCA and lessons-learned reviews to strengthen our incident response program
• Design and implement automated security processes to improve operational efficiency and reduce manual intervention
• Drive continuous improvement by identifying security gaps and implementing advanced detection and response capabilities
• Collaborate across GitLab teams to develop new security capabilities and deliver technical projects that enhance our infrastructure

What You’ll Bring

• Demonstrated ability to learn and lead incident response processes independently
• Experience with SIEM/security logging tools
• Experience with cloud platforms (GCP and/or AWS)
• Python programming skills or strong willingness to learn
• A passion for technical documentation
• Proactive approach to identifying and investigating security threats
• Interest in conducting forensic analysis of infected hosts
• Experience or strong desire to learn cloud-based security investigations

About The Team

Security Operations is a globally distributed team of engineers split across 3 core regions; AMER, APAC and EMEA, and is at the forefront of security events that impact both GitLab.com and GitLab. We are both reactive and proactive, leading security investigations, incident response support and response resolution, through to cyber threat analysis and detection and response engineering. Even though we’re a global team, we work together in a cross-regional manner and have automation and processes to facilitate collaboration when resolving incidents, handovers, and general collaboration for project work as well.

How GitLab Will Support You

• Benefits to support your health, finances, and well-being
• All remote, asynchronous work environment
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and development budget
• Parental leave
• Home office support

GitLab is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, disability, or any other status protected by law. We encourage applicants from diverse backgrounds to apply.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• IT Services and IT Consulting and Software Development

If you’re excited about this role, please apply and allow our recruiters to assess your application.