Staff Software Engineer, Security Factory: Static Analysis

About the role

As a Staff Backend Engineer on the Security Factory: Code Scanning team, you will set the technical direction for the static analysis engine that helps developers identify and fix security vulnerabilities. You will define the architecture for program modeling, including parsing and data-flow analysis, while leveraging AI agents to implement and validate engine changes. This role involves shaping long-range technical goals, mentoring engineers, and ensuring the trustworthiness of AI-assisted tooling through rigorous testing and benchmarking.

Responsibilities

• Act as the directly responsible individual for high-scope initiatives from design through delivery.
• Set technical direction for AI-assisted tooling, including defining checks for agent-written code and measuring detection quality.
• Own the architecture of the program model, including parsing, symbol resolution, and intermediate representations.
• Solve complex technical problems and advocate for improvements in quality, security, and performance.
• Mentor engineers through code review and pairing to remove blockers and improve internal standards.
• Participate in on-call rotations to assist with product and security operations.
• Define overarching architecture and specification documents, delegating components to engineers and AI agents.
• Maintain harnesses and agent instructions to ensure agent-written code remains trustworthy.

Required skills

• LLM tooling
• Rust
• Go
• Ruby
• Performance optimization
• Docker
• CI/CD
• Program analysis
• Static analysis
• ASTs
• Taint analysis
• Data-flow analysis
• Application security
• Vulnerability research
• OWASP Top 10

Nice to have

• Web application frameworks
• Mobile application frameworks
• Mutation testing
• Fuzzing

Benefits

• Health benefits
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation
• Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave

About the Company

GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity and reduce security risk. More than 50 million registered users and over 50% of the Fortune 100 trust GitLab to ship secure software faster.