Senior Backend Engineer - AI-Driven Code Security

Candidate; Northern (KY); Remote; USD 139,000 - 235,000; Full time

Benefits offered by this job

Health benefits

Flexible PTO

Equity + ESPP

Growth and development fund

Parental leave

Job summary

GitLab is seeking a Senior Backend Engineer for the Security Factory: Code Security team. You will help developers find and fix security issues across code and open source components, using AI-assisted and deterministic approaches.

Lead design of analyzers, extend vulnerability detection, and mentor engineers while working in a remote, global team culture. The role emphasizes ownership, collaboration, and scalable security tooling across the platform.

Qualifications

• Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations.
• Production code experience in a systems language (Go and/or Rust); Ruby and Python used for remediation/analyzers.
• Familiarity with package managers and dependency management (npm, Maven, pip, Bundler, Cargo).
• Demonstrated application security experience, e.g., vulnerability research, secure code review, or writing detection rules.

Responsibilities

• Act as the DRI for team initiatives from design through delivery.
• Mentor Intermediate engineers through code review and pairing.
• Design and ship analyzers with AI-assisted and deterministic detection.
• Ship features for automated remediation and dependency updates.
• Collaborate with Product Management, Engineering, and partner teams to improve quality, security and performance.

Skills

LLM tooling

Go/Rust

Dependency management

Application security

Ownership

Communication

Education

Bachelor's degree in CS/Engineering

Tools

Docker

CI/CD tooling

Job description

GitLab is seeking a Senior Backend Engineer for the Security Factory: Code Security team. You will help developers find and fix security issues across code and open source components, using AI-assisted and deterministic approaches.

Lead design of analyzers, extend vulnerability detection, and mentor engineers while working in a remote, global team culture. The role emphasizes ownership, collaboration, and scalable security tooling across the platform.