Staff Security Research Engineer (AI/DevSecOps)

GitLab

United Kingdom

Remote

GBP 127,000 - 180,000

Full time

5 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Flexible Paid Time Off

Benefits to support health, finances,

Equity compensation

Job summary

GitLab is seeking a Staff Security Research Engineer to join our Application Security Team. You will conduct cutting‑edge security research on GitLab's AI-powered DevSecOps capabilities, identify vulnerabilities, and translate findings into secure improvements.

You’ll work across GitLab Duo platforms and AI workflows, shaping future security practices for one of the world’s largest DevSecOps platforms. You’ll lead novel testing methodologies, perform hands‑on pentesting, and mentor other

Qualifications

Seven+ years in security research, pentesting, or offensive security.
Hands-on experience discovering and exploiting vulnerabilities.
Subject matter expert in at least two security areas impacting the product.

Responsibilities

Conduct security research in multiple specialty areas.
Identify and validate vulnerabilities; develop PoCs for real-world scenarios.
Assess industry vulnerability classes against the GitLab codebase.
Research AI and agentic surfaces; help define security requirements for engineering.
Build tooling to scale security research and agent-assisted discovery.
Review open-source tools and dependencies; coordinate responsible disclosure.