AI-Driven Threat Research Engineer

VulnU; Poland; Remote; PLN 272,000 - 408,000; Full time

Benefits offered by this job

Flexible PTO

Learning budget

Equity

16 weeks parental leave

Retirement match

Job summary

GitLab is seeking a Threat Research Engineer to advance attack surface research, vulnerability discovery, and AI-enabled workflows across our security stack. This full-time, remote role emphasizes building agentic research tools and scalable detection capabilities.

You’ll contribute to open-source security advisories, publish findings, and collaborate with a global team to protect GitLab customers while staying ahead of evolving threats.

Qualifications

• Hands-on security research, malware analysis, penetration testing, or security tooling.
• Experience applying AI in real work with LLM APIs or agent frameworks.
• Experience deploying production services on a public cloud.
• Ability to map attack vectors and make data-driven decisions.
• Clear writing for engineers and non-technical audiences.

Responsibilities

• Research new attack surfaces and threat vectors, including AI coding agents and package ecosystems.
• Find and responsibly disclose vulnerabilities in open source projects.
• Analyze software supply chain incidents and events.
• Build AI-powered workflows and agents for research, analysis, and detection.
• Build and maintain cloud-based systems behind detection and advisory work.
• Write findings as blog posts and present at conferences.
• Participate in on-call or operational support as needed.

Skills

Go

Python

AI tools

Cloud deployments

Tools

LangChain

LangGraph

agent SDKs

GCP

Terraform

Job description

GitLab is seeking a Threat Research Engineer to advance attack surface research, vulnerability discovery, and AI-enabled workflows across our security stack. This full-time, remote role emphasizes building agentic research tools and scalable detection capabilities.

You’ll contribute to open-source security advisories, publish findings, and collaborate with a global team to protect GitLab customers while staying ahead of evolving threats.