Senior SIRT Engineer - Remote IR & AI-Driven Defense

Coinscapture; United States; Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Growth and Development Fund

Equity Compensation & ESPP

Parental Leave

Job summary

GitLab is seeking a Senior Security Engineer for the Security Incident Response Team (SIRT) to defend GitLab.com and cloud environments. You will own incidents end-to-end in a 24/7 on-call model and drive automation and AI-driven workflows.

The role emphasizes cross-functional collaboration, RCA, runbooks, and mentoring, with a strong focus on DFIR, threat intelligence, and scalable detection. Remote global team across AMER, EMEA, APAC.

Qualifications

• Experience in security incident response and investigations in cloud-first environments.
• Experience using or administering Git/GitLab in a security or engineering context.
• Hands-on experience with SIEM, EDR, and/or detection engineering.

Responsibilities

• Lead end-to-end incident response for high-severity security events in a 24/7 on-call model.
• Prepare executive communications during incidents.
• Investigate complex incidents across cloud environments using DFIR methodologies.
• Design and implement detection capabilities with Signals Engineering.
• Develop automation and AI-assisted workflows to speed triage and response.
• Lead post-incident reviews and root cause analysis.
• Create and maintain runbooks, playbooks, and operational docs.
• Collaborate cross-functionally during incidents and mentor others.

Skills

Security incident response

Cloud DFIR

GitLab security context

SIEM/EDR/detection engineering

AWS & GCP

MITRE ATT&CK

Automation (Python/SOAR)

AI in detection

Analytical/problem-solving

Written communication

Tools

GitLab

SOAR platforms

Python

Job description

GitLab is seeking a Senior Security Engineer for the Security Incident Response Team (SIRT) to defend GitLab.com and cloud environments. You will own incidents end-to-end in a 24/7 on-call model and drive automation and AI-driven workflows.

The role emphasizes cross-functional collaboration, RCA, runbooks, and mentoring, with a strong focus on DFIR, threat intelligence, and scalable detection. Remote global team across AMER, EMEA, APAC.