Principal Field Security Engineer — Remote US

VulnU; United States; A distancia; USD 203.000 - 285.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible PTO

Learning budget

Equity

16 weeks parental leave

Retirement match

Descripción de la vacante

GitLab is seeking a Principal Field Security Engineer (US) to tackle complex customer security challenges at the intersection of architecture and business needs. You will guide customers on security controls, assist with security questionnaires, and enable field teams to address risk in enterprise deals.

You will build security content, contribute to policies, and collaborate with Legal, Sales, Product, and Engineering to close deals while maintaining trust and regulatory compliance.

Formación

• 10+ years of information security experience, including customer-facing roles.
• Deep expertise in security frameworks and standards (SOC 2, ISO 27001/27017/27018/42001, FedRAMP, NIST CSF).
• Experience with GDPR, CCPA, DORA, EU AI Act.
• Proven track record in contract negotiation and security/privacy reviews.
• Ability to translate complex security concepts for diverse audiences and create security content.

Responsabilidades

• Serve as primary security contact for enterprise customers and prospects.
• Lead contract reviews and negotiate security-related terms with Legal, Sales, Product, and Procurement teams.
• Develop security content, templates, and playbooks for field teams.
• Provide thought leadership and drive security-related initiatives and training.
• mentor and guide Security Assurance team members.

Conocimientos

Security engineering

Customer engagement

Contract negotiation

Regulatory frameworks

Cloud security

Technical writing

Educación

CISSP

CISA

CISM

CCSP

ISO 27001 Lead Implementer/Auditor

CIPP/CIPM

Descripción del empleo

GitLab is seeking a Principal Field Security Engineer (US) to tackle complex customer security challenges at the intersection of architecture and business needs. You will guide customers on security controls, assist with security questionnaires, and enable field teams to address risk in enterprise deals.

You will build security content, contribute to policies, and collaborate with Legal, Sales, Product, and Engineering to close deals while maintaining trust and regulatory compliance.