Principal Security Researcher for AI DevSecOps

GitLab; United States; Remote; USD 203,000 - 275,000; Full time

Benefits offered by this job

Flexible PTO

Equity compensation

Employee stock purchase plan

Growth and development fund

Parental leave

Team member resource groups

Job summary

GitLab is seeking a Principal Security Researcher to join the Application Security Team to conduct cutting‑edge security research on our AI‑powered DevSecOps capabilities. You will lead hands‑on testing, develop novel methodologies for AI agent security, and translate findings into actionable security improvements across GitLab's platform.

The role offers exposure to cutting‑edge AI systems, collaboration with engineering teams, and opportunities to shape security practices in one of the world’s

Qualifications

• 10+ years of experience in security research, penetration testing, or offensive security roles.
• Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust.
• Strong knowledge of AI frameworks.
• Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation.
• Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner.
• Ability to translate complex technical findings into clear risk assessments and remediation recommendations.
• Nice to Have: Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms.

Responsibilities

• Lead security research projects across multiple functional areas.
• Identify and chain vulnerabilities with outsized impact.
• Validate vulnerabilities through hands-on testing and PoC development.
• Assess AI security threats and remediation needs across the codebase.
• Direct and shape tooling for scalable security research including agent-assisted discovery.
• Translate findings into actionable risk assessments and remediation plans.
• Mentor other domain experts and contribute to security community knowledge.
• Contribute to the team and sub-department roadmap, aligning with business needs.

Skills

Security research

Penetration testing

Ruby

Go

Python

TypeScript

Rust

AI frameworks

AI attack vectors

Communication skills

Cross-functional collaboration

Job description

GitLab is seeking a Principal Security Researcher to join the Application Security Team to conduct cutting‑edge security research on our AI‑powered DevSecOps capabilities. You will lead hands‑on testing, develop novel methodologies for AI agent security, and translate findings into actionable security improvements across GitLab's platform.

The role offers exposure to cutting‑edge AI systems, collaboration with engineering teams, and opportunities to shape security practices in one of the world’s