203K–285K USD / year
Principal Field Security Engineer (US)
OtherRemote — United States
Published on 2026-11-05
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Provide expert security guidance to enterprise customers and help GitLab’s Sales and field teams address security, privacy, and compliance requirements. Review contracts and security terms, develop assurance resources, and bring customer feedback into security and product strategy.
About the company
GitLab is a DevSecOps platform that brings source control, CI/CD, security, and project management into a single application. It helps engineering teams plan, build, secure, and ship software faster.
The team
Security Assurance organization, within Security Governance. The role is on a small team of four reporting to the Director.
What you'll do
- Serve as a primary security contact for enterprise customers and prospects
- Support security questionnaires, RFPs, risk assessments, and customer assurance activities
- Review customer and vendor contracts and recommend risk-based approaches to security terms
- Partner with Legal, Sales, Product, and Procurement on security-related negotiations
- Develop customer-facing security content, sales training, templates, and playbooks
- Maintain the Trust Center and self-service security resources
- Share customer security trends and recommendations to inform business and product roadmaps
- Mentor Security Assurance colleagues and improve Field Security processes
What we're looking for
- 10+ years of information security experience, including at least 5 years in customer-facing security roles
- Expertise in security frameworks and standards such as SOC 2, ISO 27001, FedRAMP, and NIST CSF
- Knowledge of regulations such as GDPR, CCPA, DORA, and the EU AI Act
- Experience negotiating contracts and reviewing security and privacy agreements
- Strong written and verbal communication skills, including explaining technical concepts to diverse audiences
- Experience creating security content such as blogs, whitepapers, and presentations
- Understanding of cloud security, SaaS security models, and DevSecOps
- Experience working across Sales, Legal, Product, and Engineering
Nice to have
- Conference speaking experience
- Relevant certifications such as CISSP, CISA, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, or CIPP/CIPM
Benefits
- Flexible paid time off
- Equity compensation and employee stock purchase plan
- Parental leave
- Growth and Development Fund