Senior Security Engineer, Application Security (Emea)

Gitlab; Gauteng; Remote; ZAR 800 000 - 1 000 000; Full time

Job summary

A technology company in Gauteng, South Africa is seeking a Senior Security Engineer for application security. The role involves conducting thorough security assessments, refining development practices, and ensuring software quality. Ideal candidates will have over 5 years in tech, a relevant degree, and proficiency in Ruby or Go. This position offers benefits for health, finances, and well-being along with flexible time off.

Benefits

Flexible paid time off

Equity compensation

Growth and development fund

Qualifications

• 5+ years of experience in computer technology.
• Comfortable with shell scripting to automate work.
• Demonstrated ability to learn new technical concepts.

Responsibilities

• Conduct security-focused application design and architecture reviews.
• Propose secure development practices and refine security standards.
• Help secure the software supply chain.

Skills

Understanding of application security concepts

Programming experience in Ruby on Rails or Go

Application penetration testing

Strong communication skills

Education

Bachelor’s degree in Computer Science or equivalent

Tools

Brakeman

BurpSuite

Job description

Senior Security Engineer, Application Security

GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps platform, used by more than , organizations.

Our mission is to enable everyone to contribute to and co-create the software that powers our world.

By uniting teams and eliminating barriers, we redefine what is possible in software development and deliver AI benefits at every stage of the SDLC.

An Overview of This Role

The Application Security team works with GitLab engineers and product teams to anticipate and prevent the introduction of vulnerabilities during design and development, ensuring delivery of high quality software that customers can trust.

What You’ll Do

Conduct security-focused application design and architecture reviews, threat modeling, code review, and security testing assessments, pushing the boundaries by exploring the full impact and demonstrating real exploitation in controlled environments.

Propose and establish secure development practices, develop and refine security standards that support Product and Engineering teams to deliver secure features at high velocity.

Help secure GitLab by directly contributing to the product, providing customer feedback on platform features, capabilities, scope, and technology coverage.

Secure our software supply chain and improve security workflows and controls of our supply chain security.

Identify and drive team maturity opportunities to enable scaling of internal processes, metrics, workflows, and automations as we grow.

What You’ll Bring

Bachelor’s degree or equivalent in Computer Science or equivalent practical education.

5+ years professional experience in computer technology, including IT, technical support, or engineering.

Strong understanding of computer code and ability to detect and remediate common security defects, race conditions, and logic vulnerabilities.

Programming experience in one or more coding languages, preferred Ruby on Rails or Go.

Comfortable with shell scripting to automate recurring work or build PoC exploits.

Strong knowledge of application security concepts such as OWASP Top 10, STRIDE, CVSS, and threat modeling assessments.

Experience with application security practices: code review, threat modeling, static and dynamic analysis (SAST, DAST), and attack surface analysis.

Experience performing application penetration testing or vulnerability research / bug bounty hunting.

Ability to provide subject matter expertise on software architecture design and system security.

Familiar with common security libraries and controls for Ruby on Rails applications.

Demonstrated ability to learn new technical concepts in cloud and web application security assessment.

Strong communication skills, able to collaborate with technical and non-technical audiences across teams.

Fluent in English, both written and verbal, suitable for a remote, asynchronous environment.

Comfortable using Git.

Experience with standard web application security tools such as Brakeman and BurpSuite.

How GitLab Will Support You

Benefits to support health, finances, and well-being.

Flexible paid time off.

Team Member Resource Groups.

Equity compensation and employee stock purchase plan.

Growth and development fund.

Parental leave.

Home office support.

GitLab is proud to be an equal‑opportunity workplace and is an affirmative action employer.

Our policies and practices related to recruitment, employment, and advancement are based solely on merit, regardless of race, color, religion, ancestry, sex, national origin, age, citizenship, marital status, disability, genetic information, military service or any other protected characteristic.

GitLab will not tolerate discrimination or harassment.

If you have a disability or special need requiring accommodation, please let us know during the recruiting process.