Threat Research Engineer, Security Factory: Threat Research

About this role

Research emerging threats and vulnerabilities in developer tools, AI coding agents, and package ecosystems, then turn findings into detection and advisory capabilities. The role combines security research, software development, cloud operations, and AI-powered workflows.

About the company

GitLab is a DevSecOps platform that brings source control, CI/CD, security, and project management into a single application. It helps engineering teams plan, build, secure, and ship software faster.

The team

Threat Research group

Stack

What you'll do

• Research attack surfaces and threat vectors, including AI agents and package ecosystems
• Find and responsibly disclose vulnerabilities in open-source projects and developer tools
• Analyze software supply-chain incidents
• Build AI-powered research, analysis, and detection workflows
• Develop and maintain cloud systems for detection and advisories
• Improve vulnerability and malware advisory coverage and quality
• Publish findings and present them at conferences
• Provide operational or on-call support as required

What we're looking for

• Hands-on security experience in research, malware analysis, penetration testing, or security tooling
• Demonstrated practical use of AI, such as LLM APIs or agent frameworks
• Strong Go or Python programming skills and sound software engineering practices
• Experience deploying and operating production services in a public cloud
• Understanding of package ecosystems and software supply-chain attacks
• Ability to assess attack vectors and make data-driven trade-offs
• Clear writing for technical and general audiences

Nice to have

• Published vulnerability findings
• Research on AI agents, LLM applications, or MCP servers
• Google Cloud Platform experience
• Terraform or OpenTofu experience

Benefits

• Flexible paid time off
• Equity compensation and employee stock purchase plan
• Growth and development fund
• Parental leave
• Team member resource groups