Drimva

GitLab

Senior Software Engineer, Security Factory: Code Security

$139K–$235K

Remote, Canada +3 · Remote · Senior · Full-time · Posted Oct 9, 2026

Location
Remote, Canada
Remote, United States
Canada
United States of America
Experience
Substantial professional experience; no number of years specified.

About the job

Build and ship code-security analyzers, dependency analysis and remediation features that help developers detect and fix vulnerabilities in source code and open-source dependencies.

What you'll do

  • Design, evaluate, package, and maintain hybrid security analyzers, including detection rules, test fixtures, and evaluation harnesses.
  • Build manifest, lockfile, and SBOM parsing across ecosystems and extend the automated dependency-remediation service.
  • Own initiatives from design through delivery, mentor engineers, collaborate across teams, and participate in on-call rotations.

What they ask for

  • Experience building LLM tooling such as harnesses, agent pipelines, or evaluations, with sound judgment about output reliability.
  • Substantial professional experience writing and testing production code in a systems language, with depth in Go and/or Rust.
  • Familiarity with package managers and dependency management in one or more language ecosystems.
  • Application security experience, including vulnerability classes such as OWASP Top 10 and CWE, and the software supply chain.

Nice to have

  • Experience evaluating AI-driven detection against labeled data or optimizing performance at scale.
  • Hands-on program analysis, familiarity with application frameworks, or experience with containerized workflows and CI/CD.

Pay

$139,200 — $235,200 USD (base salary)

Tools

Go, Rust, Ruby, Python, npm, Maven, Docker, CI/CD

AI focus

Build hybrid analyzers combining deterministic analysis and AI reasoning; develop and evaluate LLM tooling and use AI-assisted development tools in daily work.

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 4, 2026 (UTC)