GitLab
Senior Software Engineer, Security Factory: Code Security
$139K–$235K
Remote, Canada +3 · Remote · Senior · Full-time · Posted Oct 9, 2026
- Location
- Remote, Canada
Remote, United States
Canada
United States of America - Experience
- Substantial professional experience; no number of years specified.
About the job
Build and ship code-security analyzers, dependency analysis and remediation features that help developers detect and fix vulnerabilities in source code and open-source dependencies.
What you'll do
- Design, evaluate, package, and maintain hybrid security analyzers, including detection rules, test fixtures, and evaluation harnesses.
- Build manifest, lockfile, and SBOM parsing across ecosystems and extend the automated dependency-remediation service.
- Own initiatives from design through delivery, mentor engineers, collaborate across teams, and participate in on-call rotations.
What they ask for
- Experience building LLM tooling such as harnesses, agent pipelines, or evaluations, with sound judgment about output reliability.
- Substantial professional experience writing and testing production code in a systems language, with depth in Go and/or Rust.
- Familiarity with package managers and dependency management in one or more language ecosystems.
- Application security experience, including vulnerability classes such as OWASP Top 10 and CWE, and the software supply chain.
Nice to have
- Experience evaluating AI-driven detection against labeled data or optimizing performance at scale.
- Hands-on program analysis, familiarity with application frameworks, or experience with containerized workflows and CI/CD.
Pay
$139,200 — $235,200 USD (base salary)
Tools
Go, Rust, Ruby, Python, npm, Maven, Docker, CI/CD
AI focus
Build hybrid analyzers combining deterministic analysis and AI reasoning; develop and evaluate LLM tooling and use AI-assisted development tools in daily work.
Model-written summary · the original posting is authoritative