Staff Infrastructure Security Engineer (APAC, EMEA)

GitlabGitlab·Remote(Remote, APAC; Remote, EMEA)
Software Development
Adjust

WFA Digital Insight

The demand for skilled security engineers has skyrocketed, with a 25% growth in job postings over the past year. As a Staff Infrastructure Security Engineer at Gitlab, you'll be at the forefront of DevSecOps, working with a high-performance team to secure public cloud infrastructure. With the rise of AI-assisted security, this role requires a unique blend of technical expertise and strategic thinking. Before applying, consider your experience with infrastructure security, threat modeling, and AI-driven solutions.

Job Description

About the Role

As a Staff Infrastructure Security Engineer at Gitlab, you will be responsible for ensuring the security and resiliency of our public cloud infrastructure. This involves working closely with cross-functional teams to implement security capabilities, define technical direction, and drive business outcomes. Our Infrastructure Security Team is committed to delivering high-quality solutions that meet the needs of our customers.

The role of a Staff Infrastructure Security Engineer is critical to our organization, as it requires a deep understanding of infrastructure security, threat modeling, and AI-driven solutions. You will be working with a team of experienced engineers to identify and mitigate potential security risks, and to develop and implement comprehensive security plans.

Our team is passionate about delivering innovative solutions that make a real impact. As a Staff Infrastructure Security Engineer, you will have the opportunity to work on complex projects, collaborate with industry leaders, and contribute to the development of our security capabilities.

What You Will Do

  • Set architectural patterns, reference implementations, and foundational security automation for our infrastructure security
  • Lead infrastructure security initiatives from problem framing to delivery, scoping ambiguous work into executable streams with clear success criteria
  • Conduct and lead comprehensive security reviews and threat modeling for complex infrastructure components
  • Identify systemic risks and drive remediation across affected systems
  • Set the team's approach to AI-assisted security engineering, identifying areas where AI can increase leverage and establishing patterns for others to adopt
  • Serve as an authoritative technical voice for Infrastructure Security across our stakeholders
  • Translate architectural tradeoffs into clear decisions for engineering teams and senior leadership
  • Partner on technical planning, prioritization, and roadmap development to align technical work with business objectives
  • Mentor and develop engineers, raising the technical bar and modeling inclusive collaboration

What We Are Looking For

  • 8+ years of experience in infrastructure security, with a strong background in cloud security and DevSecOps
  • Proven track record of leading security initiatives and driving business outcomes
  • Strong technical skills in areas such as security architecture, threat modeling, and AI-driven solutions
  • Experience with cloud platforms such as AWS, Azure, or Google Cloud
  • Strong understanding of security frameworks and regulations, such as NIST, ISO 27001, or SOC 2
  • Excellent communication and collaboration skills, with the ability to work with cross-functional teams
  • Strong problem-solving skills, with the ability to analyze complex problems and develop creative solutions
  • Experience with security automation tools and technologies, such as Terraform or Ansible

Nice to Have

  • Experience with AI-driven security solutions, such as machine learning or natural language processing
  • Knowledge of containerization and orchestration technologies, such as Docker or Kubernetes
  • Familiarity with agile development methodologies and version control systems, such as Git
  • Experience with security compliance and auditing, such as HIPAA or PCI-DSS
  • Certification in security or related field, such as CISSP or CISM

Benefits and Perks

  • Competitive salary and equity package
  • Comprehensive health, dental, and vision insurance
  • Flexible paid time off and remote work options
  • Professional development opportunities, including training and conference attendance
  • Access to cutting-edge technologies and tools
  • Collaborative and dynamic work environment
  • Recognition and reward programs for outstanding performance
  • Opportunity to work with a high-performance team and contribute to the development of our security capabilities

How to Stand Out

  • Tip: Highlight your experience with infrastructure security, threat modeling, and AI-driven solutions in your resume and cover letter.
  • Tip: Be prepared to discuss your approach to security automation, including tools and technologies you've used in the past.
  • Tip: Showcase your ability to communicate complex technical concepts to non-technical stakeholders, including engineering teams and senior leadership.
  • Tip: Demonstrate your knowledge of security frameworks and regulations, such as NIST or ISO 27001.
  • Tip: Prepare examples of your experience with cloud platforms, such as AWS or Azure, and be ready to discuss your approach to cloud security.
  • Tip: Highlight your ability to work collaboratively with cross-functional teams, including engineering, product, and design.
  • Tip: Be prepared to discuss your salary expectations and negotiation strategy, and be aware of the market rate for similar roles.

This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.