Intermediate Security Analyst, Vulnerability Operations

About this role

GitLab is seeking an Intermediate Security Analyst to join their Product Security Vulnerability Operations team. The role involves triaging security reports, supporting vulnerability management operations, and coordinating communications with various stakeholders. This position is ideal for an early-career security professional looking to build expertise in product security response.

About the company

GitLab is a DevSecOps platform that brings source control, CI/CD, security, and project management into a single application. It helps engineering teams plan, build, secure, and ship software faster.

The team

Product Security Vulnerability Operations

What you'll do

• Triage and validate incoming bug bounty reports
• Support vulnerability management activities
• Collaborate with PSIRT engineers and development teams
• Assist in severity assessments using security frameworks
• Communicate with security researchers
• Prepare information for CVE assignment
• Draft customer-facing communications about vulnerabilities
• Monitor operational metrics for trends and improvements

What we're looking for

• Early-career experience or education in cybersecurity or related field
• Foundational understanding of software vulnerabilities
• Familiarity with security terminology and frameworks
• Strong attention to detail and organizational skills
• Clear communication skills for technical and non-technical audiences
• Experience with a bug bounty or vulnerability disclosure platform
• Experience in security report analysis or vulnerability research

Nice to have

• Basic scripting or log analysis experience
• Experience writing technical documentation
• Knowledge of CVE processes or vulnerability databases

Benefits

• Flexible Paid Time Off
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave