Staff Product Security Architect: Lead Secure DevOps

GitLab Inc.; Polska; Hybrid; USD 180,000 - 240,000; Full time

Job summary

GitLab Inc. is hiring a Staff Product Security Architect to join our Security Platforms and Architecture team. You will drive architectural strategy, embed security into developer workflows, and serve as Security Owner for key entries in our risk management framework.

You will mentor engineers and influence engineering direction with proactive security guidance. You will collaborate with product and engineering teams, build reusable security artifacts, and shape AI tooling security guidance to

Qualifications

• Depth in application security architecture including authentication/authorization models and trust boundary analysis.
• Experience securing distributed systems and handling secrets across processes.
• Knowledge of software supply chain security and build/release integrity.
• Track record of proactive architecture work identifying risk before incidents.

Responsibilities

• Partner with engineering and product leadership to anticipate security problems.
• Lead security architecture and design for strategic initiatives across cross-functional teams.
• Identify and prioritize systemic security risks as Security Owner for high-priority items.
• Codify security decisions into reusable guardrails, patterns, and threat models.
• Build proofs of concept to unblock engineering teams and shorten deployment cycles.
• Conduct security architecture reviews for large projects with proper coverage.
• Threat model new/existing systems and enable teams to model their own work.
• Collaborate with Security Research on proactive risk exploration.
• Mentor security engineers and represent architecture to engineers.

Skills

Security architecture

Authz models

Service-to-service auth

Threat modeling

Proactive risk assessment

Architecture governance

Strong communication

AI tooling guidance

Job description

GitLab Inc. is hiring a Staff Product Security Architect to join our Security Platforms and Architecture team. You will drive architectural strategy, embed security into developer workflows, and serve as Security Owner for key entries in our risk management framework.

You will mentor engineers and influence engineering direction with proactive security guidance. You will collaborate with product and engineering teams, build reusable security artifacts, and shape AI tooling security guidance to