Staff Product Security Architect

Responsibilities

• Partner with engineering and product leadership across GitLab, developing enough context in their domains to anticipate security problems rather than react to them
• Lead security architecture and design work for strategic initiatives, and provide direction to the cross-functional teams delivering them
• Identify, assess, and prioritise systemic security risks, and act as Security Owner for high-priority items in the Product Security Risk Register, co-executing remediation with the teams who own the code
• Codify recurring security decisions into reusable artifacts — guardrails, standards, design patterns,skills, and reference threat models — delivered into developer and AI coding tool workflows
• Build proofs of concept and prototypes to unblock engineering teams and shorten the distance between a security requirement and a working implementation
• Conduct security architecture reviews for large or strategic projects, and coordinate with Application Security so that review coverage is comprehensive and correctly prioritised
• Threat model new and existing systems, and establish the patterns that let teams threat model their own work
• Work with Security
• Research on proactive exploration of unknown risks in GitLab's architecture
• Anticipate emerging security challenges and propose architectural responses before they reach implementation

Languages