Senior Corporate Security Engineer, Mac OS
WFA Digital Insight
The demand for skilled security engineers has surged in recent years, with a 25% increase in job postings for corporate security roles in 2025 alone. As companies continue to adopt remote work models, the need for experts who can secure systems and endpoints has become paramount. Gitlab, a leader in DevSecOps, is seeking a Senior Corporate Security Engineer to join their team. With a focus on macOS security, this role requires a unique blend of technical expertise and strategic thinking. Candidates should be well-versed in endpoint security, automation, and detection, as well as have experience working in fast-paced, remote environments.
Job Description
About the Role
As a Senior Corporate Security Engineer at Gitlab, you will play a critical role in securing the systems and endpoints that power the company's fully remote environment. With a primary focus on macOS, you will design and deliver endpoint security solutions that meet the highest standards of security, compliance, and operational efficiency. You will work closely with cross-functional teams, including Information Technology, Security Operations, and Detection and Response, to drive process improvements and reduce risk.The role requires a deep understanding of endpoint security, automation, and detection, as well as experience working with Infrastructure-as-Code, Terraform, and GitOps workflows. You will be responsible for leading the security architecture of Gitlab's endpoint fleet and related infrastructure, defining and enforcing security baselines, and developing patching and software distribution approaches that align with security, compliance, and operational requirements.
Gitlab's high-performance culture is driven by a set of values that prioritize innovation, collaboration, and continuous knowledge exchange. As a Senior Corporate Security Engineer, you will be expected to embody these values and contribute to a culture that values every voice and enables team members to reach their full potential.
What You Will Do
- Lead the security architecture of Gitlab's endpoint fleet and related infrastructure, with a primary focus on macOS.
- Design and support automation for secure endpoint deployment, configuration, and lifecycle management using code-based workflows.
- Manage endpoint and SaaS security configuration through Terraform, version control, merge requests, continuous integration pipelines, and automated rollouts.
- Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
- Develop patching and software distribution approaches that align with security, compliance, and operational requirements.
- Partner with Information Technology, Security Operations, and Detection and Response teams to improve endpoint telemetry, detections, and response models.
- Drive process improvements that reduce manual work and lower risk by favoring automation, policy-driven controls, and auditable change management.
- Mentor engineers across Corporate Security and Information Technology, and serve as a senior escalation point for complex endpoint security issues.
What We Are Looking For
- Experience designing and delivering endpoint, systems, or corporate security solutions in environments that require scalable, durable, and secure systems.
- Strong understanding of endpoint security, automation, and detection, including experience with macOS, iOS, Windows, and Linux endpoints.
- Experience working with Infrastructure-as-Code, Terraform, and GitOps workflows.
- Ability to design and support automation for secure endpoint deployment, configuration, and lifecycle management using code-based workflows.
- Strong understanding of security baselines, patching, and software distribution approaches.
Nice to Have
- Experience working with cloud-based security solutions and SaaS platforms.
- Familiarity with containerization and container orchestration tools such as Docker and Kubernetes.
- Experience with security information and event management (SIEM) systems and incident response methodologies.
Benefits and Perks
- Competitive salary and equity package.
- Opportunity to work with a leader in DevSecOps and contribute to the development of cutting-edge security solutions.
- Collaborative, remote work environment with a strong focus on innovation and continuous learning.
- Access to cutting-edge technologies and tools, including Infrastructure-as-Code, Terraform, and GitOps workflows.
- Flexible work arrangements, including remote work options and flexible hours.
- Comprehensive benefits package, including health, dental, and vision insurance, as well as retirement savings plans.
How to Stand Out
- Develop a strong understanding of endpoint security, automation, and detection, including experience with macOS, iOS, Windows, and Linux endpoints.
- Highlight your experience working with Infrastructure-as-Code, Terraform, and GitOps workflows in your application and be prepared to provide examples of your work.
- Showcase your ability to design and support automation for secure endpoint deployment, configuration, and lifecycle management using code-based workflows.
- Be prepared to discuss your experience working in fast-paced, remote environments and collaborating with cross-functional teams.
- Consider highlighting any experience you have working with cloud-based security solutions and SaaS platforms, as well as any familiarity with containerization and container orchestration tools.
- Prepare to provide examples of your experience with security baselines, patching, and software distribution approaches, as well as your understanding of security information and event management (SIEM) systems and incident response methodologies.
This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.