Intermediate Backend Engineer , Security Factory

An overview of this role

As an Intermediate Backend Engineer on GitLab's Security Factory: Code Scanning team, you'll help developers find and fix security issues in their code by contributing to the static analysis engine that finds them.

Your work spans both the engine and the tools we use to evaluate it. You'll extend how the engine models programs, from parsing source code and resolving symbols to building call graphs and tracking tainted data across files and languages. You'll also build and apply tooling to test its findings against benchmark applications with known vulnerabilities, measuring both false positives and missed vulnerabilities.

We build the engine with artificial intelligence (AI) agents that write and review code from written specifications, under human direction. You'll implement component specifications within the team's architecture, working with engineers and AI agents. Good judgment about when to trust agent output, and when to bring it to human review, is central to the role.