Principal Security Researcher (Remote: Canada, Israel, UK or US)

Lead security research projects spanning multiple functional areas of the GitLab platform. Identify novel and chained vulnerabilities in large, complex systems and validate them through hands-on testing and proof-of-concept exploits. Assess emerging vulnerability classes and drive remediation with engineering teams. Research GitLab's AI and agentic security surfaces. Build automation to scale vulnerability discovery. Research the security of open-source tools GitLab depends on and report findings responsibly. Mentor other domain experts and share knowledge with the wider security community.

10 or more years of experience in security research, penetration testing or offensive security. Strong vulnerability discovery and exploitation skills in large codebases. Proficiency in at least two of Ruby, Go, Python, TypeScript or Rust. Strong knowledge of AI frameworks and attack vectors including prompt injection, agent manipulation and workflow exploitation. Excellent written communication and cross-functional collaboration skills. Published security research, distributed systems expertise or GitLab platform experience are a plus. Must be located in Canada, Israel, the United Kingdom or the United States.