GitLab - Senior Manager, Security Incident Response Team
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT
Requirements
• Experience assisting customers during high visibility and urgency security incidents and being comfortable representing GitLab Security during customer cybersecurity questions and escalations. • Proven ability to deliver results across a global incident response team of 10+ engineers, and matrixed teams such as the Security division, and supporting R&D teams (Product, Engineering, Infrastructure, etc). • Proven experience in incident response leadership and large scale incident coordination. • Experience conducting investigations and log analysis using SIEM tools, such as Splunk or Elastic. • Working knowledge of Google Cloud Platform (GCP) and/or AWS as well as cloud forensics • Proficiency in proactive hunting based on threat intelligence • Experience using GitLab (or a related DevSecOps platform like GitHub) for project tracking - Bonus points if you have experience responding to threats against a SaaS platform. • A passion for investigation quality and depth of analysis - prioritizing quality over speed. • Experience using AI/LLMs to automate and improve incident response processes and capabilities. • An understanding of supply chain threats and how to defend a SaaS platform against such threats. • The Security Incident Response Team is a globally distributed team of incident response engineers split across three core regions; AMER, APAC and EMEA, and is at the forefront of security events that impact both GitLab’s products and company. We are both proactive and reactive, responding to security alerts, leading security investigations, conducting threat hunts and collaborating with peer Security Operations teams to conduct purple teaming exercises, build threat detections, improve security telemetry and investigate trending threats. Even though we’re a global team, we work together in a cross-regional manner and have automation and processes to facilitate collaboration when resolving incidents, handovers, and general collaboration for project work as well. • The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
Responsibilities
• Serve as trusted advisor as part of the security division’s leadership team, actively shaping the program direction. • Build and mature incident response runbooks, procedures, and capabilities. • Provide leadership to multiple security operations team shifts that will sometimes require you to work on nights or weekends. • Develop a culture of incident response excellence through a focus on investigation depth and accuracy. • Lead cross-functional collaboration between peer SecOps teams, security departments, and extended support teams such as Legal, Customer Support, and Infrastructure. • Foster a defense first mindset through actionable incident retrospective mitigations to close defense gaps, making GitLab a hard target for attackers. • Lead a team of expert security engineers with experience in security automation, deep dive forensics and incident response, AI detection and response capabilities, and GitLab the product. • Support response readiness and expertise about new GitLab corporate and product capabilities and features. • Drive insights from the alerts, investigations, and incidents handled by SIRT to improve the security posture of GitLab.
Benefits
• $168,000 - $280,000 USD • How GitLab will support you • Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. • Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. • Country Hiring Guidelines:
No credit card. Takes 10 seconds.