Remote: Staff Endpoint Security Engineer (macOS)

GitLab Inc.; Oregon; Hybrid; USD 168,000 - 238,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Equity Compensation

Growth and Development Fund

Parental Leave

Team Member Resource Groups

Job summary

GitLab Inc. seeks a Staff Corporate Security Engineer to secure endpoints and SaaS platforms in a fully remote environment, with a strong macOS focus.

You will own endpoint hardening, automation, and scalable security controls, delivering measurable outcomes across the fleet using Infrastructure-as-Code, Terraform, and GitOps. Collaborating across IT, Security Operations, and Detection and Response, you will enhance telemetry, detections, and response while mentoring engineers and driving

Qualifications

• Experience designing and delivering endpoint, systems, or corporate security solutions in scalable, durable controls.
• Deep knowledge of endpoint management platforms such as Jamf Pro or FleetDM for macOS.
• Strong hands-on Terraform and Infrastructure-as-Code practices.
• Experience with GitOps workflows using Git repositories, MR, CI pipelines.
• Proficiency in scripting or programming for automation (bash, Python, PowerShell, or Go).
• Familiarity with Okta, Google Workspace, LDAP.
• Ability to communicate clearly and work independently in a remote environment.
• Willingness to bring transferable security/engineering experience with a security-focused approach.

Responsibilities

• Lead the security architecture of GitLab's endpoint fleet with a macOS focus.
• Design and support automation for secure endpoint deployment and lifecycle management.
• Manage endpoint and SaaS security configuration through Terraform, VCS, MERGE requests, CI pipelines, and automated rollouts.
• Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
• Develop patching and software distribution approaches aligned with security and compliance.
• Partner with IT, Security Operations, and Detection and Response to improve telemetry and detections.
• Drive automation and auditable change management to reduce manual work and risk.
• Mentor engineers and serve as senior escalation for endpoint security issues.

Skills

Endpoint security

macOS expertise

Automation scripting

Go/Python scripting

GitOps experience

Communication

Independent work

Security architecture

Tools

Jamf Pro

FleetDM

Terraform

Okta

Google Workspace

LDAP

Bash

Python

PowerShell

Go

Job description

GitLab Inc. seeks a Staff Corporate Security Engineer to secure endpoints and SaaS platforms in a fully remote environment, with a strong macOS focus.

You will own endpoint hardening, automation, and scalable security controls, delivering measurable outcomes across the fleet using Infrastructure-as-Code, Terraform, and GitOps. Collaborating across IT, Security Operations, and Detection and Response, you will enhance telemetry, detections, and response while mentoring engineers and driving