Staff Backend Engineer - Security Factory: Static Analysis

GitLab; United States; Remote; USD 153,000 - 259,000; Full time

Benefits offered by this job

Benefits to support health, finances,

Flexible Paid Time Off

Equity Compensation & Employee Stock-P

Growth and Development Fund

Parental Leave

Job summary

GitLab is seeking a Staff Backend Engineer for the Security Factory: Code Scanning team. You will shape the static analysis engine, model program representations, and lead AI-assisted tooling efforts to find and fix security issues in code.

As a Staff engineer, you’ll define long-range goals, mentor engineers, and collaborate across security and development teams. This is a remote, global role emphasizing architecture, evaluation, and responsible disclosure in open source contexts.

Qualifications

• Experience building your own LLM tooling, such as a harness, an agent pipeline, or evaluations.
• Extensive professional experience writing, testing, and reviewing production code in Rust, Go, or a comparable systems language.
• Experience with performance optimization and with containerized workflows and CI/CD (we use Docker heavily).
• A deep program analysis and static analysis background, such as parsing and ASTs, IRs, taint and data-flow analysis, etc.
• Deep application security experience, vulnerability research, CWE/OWASP knowledge.

Responsibilities

• Act as the directly responsible individual for the team’s highest-scope initiatives from design through delivery.
• Bring systems built by one engineer to team ownership through documentation, tests, and shared review.
• Set the technical direction for the AI-assisted tooling and establish checks for merge readiness, including SAST rules.
• Own the architecture of the program model and the pipeline turning source into findings, extend to new languages/frameworks.
• Solve high-scope technical problems, advocate for quality, security, and performance improvements with stakeholders.
• Mentor engineers through code reviews and pairing, remove blockers to autonomy, define internal standards.
• Participate in on-call rotations to assist troubleshooting product operations and urgent issues.
• Define overarching architecture and specifications for the engine, coordinating AI agents and engineers.
• Build and maintain harnesses, agent instructions, and governance to keep agent-written code trustworthy.
• Stay current with research in program analysis and security, turning findings into prototypes and upstream contributions.

Skills

LLM tooling

Rust

Go

Performance optimization

CI/CD

Containerization

Static analysis

Security (OWASP/CWE)

Mentoring

Tools

Docker

Job description

GitLab is seeking a Staff Backend Engineer for the Security Factory: Code Scanning team. You will shape the static analysis engine, model program representations, and lead AI-assisted tooling efforts to find and fix security issues in code.

As a Staff engineer, you’ll define long-range goals, mentor engineers, and collaborate across security and development teams. This is a remote, global role emphasizing architecture, evaluation, and responsible disclosure in open source contexts.