Senior Infrastructure Security Engineer

An overview of this role

As a member of the Infrastructure Security Team within the Product Security Department you will work with teams across GitLab to ensure that the components that comprise our public cloud infrastructure are built from the beginning with the resiliency and security expectations that our customers rely on to power their DevSecOps goals.

As a Senior Security Engineer, you will lead cross-team infrastructure security initiatives that strengthen GitLab's SaaS Platforms (e.g. GitLab Dedicated, Cells) and Self-Managed offerings. You'll design and own the implementation of security solutions while collaborating with various stakeholders across GitLab. Your technical leadership and hands-on execution will drive pragmatic security capabilities that empower critical software factories globally to operate securely at scale.

What You’ll Do  

• Lead cross-team infrastructure security initiatives from design through delivery, owning technical outcomes and stakeholder communication
• Design and implement security solutions for cloud infrastructure, container platforms, and orchestration systems
• Drive security reviews for infrastructure changes, providing guidance and identifying risks before they reach production
• Develop secure patterns and reference implementations that enable engineering teams to deliver secure infrastructure quickly
• Identify systemic security gaps in cloud, Kubernetes, and infrastructure configurations, then lead remediation efforts across affected systems
• Partner with SRE, Infrastructure, and Engineering teams to integrate security into platform services and deployment pipelines
• Mentor and partner with engineers supporting their professional development
• Contribute to the team's technical roadmap, identifying high-impact security improvements aligned with business objectives
• Fulfill the Product Security Division Mission of securing GitLab Infrastructure with our own product (“dogfooding”)   

What You’ll Bring 

• Strong experience securing cloud infrastructure at scale (AWS/GCP/Azure), including IAM, networking, compute, and storage services
• Proficiency in multiple programming languages (Go, Python, Ruby) with ability to build production-quality security tooling
• Deep knowledge of container security, Kubernetes hardening, and orchestration platform security best practices
• Extensive experience with Infrastructure-as-Code security (Terraform, Ansible, CloudFormation) including policy-as-cod