GitLab
Principal Security Researcher
$203K–$275K
Remote, Canada +3 · Remote · Principal · Full-time · Posted Sep 5, 2026
- Location
- Remote, Canada
Remote, Israel
Remote, United Kingdom
Remote, United States - Experience
- 10+ years in security research, penetration testing, or offensive security roles.
About the job
Conducts security research and penetration testing across GitLab’s DevSecOps and AI-powered products, identifying vulnerabilities and guiding engineering teams on security improvements.
What you'll do
- Lead vulnerability research, hands-on testing, and proof-of-concept exploit development across GitLab products and dependencies.
- Research security risks in AI and agentic features, set security requirements, and build tooling to scale vulnerability discovery.
- Drive remediation across teams, advise and mentor colleagues, and share findings with the security community.
What they ask for
- 10+ years of experience in security research, penetration testing, or offensive security roles.
- Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust; ability to analyze code across multiple languages and codebases.
- Strong knowledge of AI frameworks and AI attack vectors, including prompt injection, agent manipulation, and workflow exploitation.
- Ability to discover and exploit vulnerabilities in large codebases and complex systems, and to lead cross-functional remediation.
Nice to have
- Published security research or conference presentations; software engineering background with distributed systems expertise.
- Experience with GitLab or similar DevSecOps platforms.
Pay
$203,200 — $275,000 USD (base salary)
Tools
Ruby, Go, Python, TypeScript, Rust, GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat
AI focus
Research security of AI-powered DevSecOps capabilities, AI agents, and workflows; develop AI agent security testing methods and agent-assisted vulnerability discovery.
Model-written summary · the original posting is authoritative