Senior Software Engineer, Security Factory: Code Security

An overview of this role

As a Senior Backend Engineer on GitLab's Security Factory: Code Security team, you help developers find and fix security issues. Those issues live in the code they write and in the open source components they depend on.

Your work spans complementary parts of a complete security analysis. On the dependency analysis side, you teach the analysis engine what a project depends on. You parse dependency manifests, lockfiles, and SBOMs so the engine knows which libraries and frameworks are in play and how the code uses them. You also extend the service that turns security advisories into automated merge requests that update vulnerable dependencies. On the vulnerability detection side, you grow GitLab's security analysis engine with hybrid analyzers that blend rule-based detection and AI reasoning.

You build and apply the tooling that develops, evaluates, and ships those analyzers, and you measure how well they find real problems. That work also expands coverage of the libraries, frameworks, and AI agent tooling that real-world applications are built on.