Intermediate Backend Engineer, SSCS: Supply Chain

About the Role

In this role, you will have the opportunity to work with a small team, influencing implementation details, team practices, and the product experience. You will be part of Gitlab's all-remote, async-first, values-driven environment, where clear written communication and thoughtful coordination across time zones are essential.

Gitlab is a company that values innovation, collaboration, and continuous knowledge exchange. With over 50 million registered users and more than 50% of the Fortune 100 trusting Gitlab to ship better, more secure software faster, this is an exciting opportunity to be part of a company that is shaping the future of software development.

What You Will Do

• Implement well-scoped backend features across the Add-On's supply chain security product, including package policy integrations, ingestion pipeline improvements, signing and verification support, and reliability-focused work.
• Build and maintain integrations between Add-On functionality and Gitlab's existing software composition analysis scanning infrastructure.
• Write and maintain comprehensive automated test coverage, including RSpec and integration tests.
• Take on work across multiple feature areas as priorities evolve, contributing as a generalist where the team needs support most.
• Participate actively in code review, giving thoughtful, actionable feedback and incorporating feedback constructively into your own work.
• Contribute clear internal documentation for the features and behavior you ship, so teammates can support, extend, and troubleshoot the product effectively.
• Collaborate with the team to identify and prioritize areas for improvement, driving the development of the supply chain security feature.
• Work closely with the security team to ensure the feature meets the required security standards and compliance regulations.
• Develop and maintain technical documentation for the feature, including architecture diagrams and technical guides.

What We Are Looking For

• 3+ years of experience in backend engineering, with a focus on Ruby on Rails and Go.
• Experience with security-focused development, including secure coding practices and security testing.
• Strong understanding of software supply chain security and the ability to implement security controls.
• Excellent problem-solving skills, with the ability to debug complex issues.
• Experience with automated testing, including RSpec and integration tests.
• Strong collaboration and communication skills, with the ability to work effectively in a remote environment.
• Experience with agile development methodologies and version control systems, such as Git.

Nice to Have

• Experience with cloud-based technologies, such as AWS or Azure.
• Knowledge of containerization, such as Docker.
• Experience with CI/CD pipelines and deployment automation.
• Familiarity with security compliance regulations, such as SOC 2 or HIPAA.

Benefits and Perks

• Competitive salary and benefits package.
• Opportunity to work with a cutting-edge technology stack, including Ruby on Rails and Go.
• Collaborative and dynamic work environment, with a strong focus on innovation and continuous learning.
• Flexible working hours and remote work options, with the ability to work from anywhere.
• Access to a wide range of training and development opportunities, including conferences and workshops.
• Recognition and reward for outstanding performance, including bonuses and stock options.
• Comprehensive health and wellness program, including mental health support and employee assistance programs.
• Generous parental leave policy, with paid time off for new parents.

• To stand out as a candidate, be prepared to showcase your experience with backend development, security-focused development, and collaboration in a remote environment.
• Make sure your resume and cover letter are tailored to the role, highlighting your relevant skills and experience.
• Practice your coding skills, particularly in Ruby on Rails and Go, to be prepared for technical interviews.
• Research the company culture and values, and be prepared to discuss how you align with them.
• Be prepared to provide examples of your experience with automated testing, including RSpec and integration tests.
• Don't be afraid to ask questions during the interview process, such as what a typical day looks like in the role or what opportunities there are for growth and development.