Senior Corporate Security Engineer - GitLab

About the Role

As a Senior Corporate Security Engineer, you will help secure the systems GitLab team members rely on every day in a fully remote environment. This role sits within Corporate Security Engineering and focuses on building secure-by-default controls for endpoints and SaaS platforms, with a strong emphasis on macOS.

You will own technical decisions around endpoint hardening, automation, and detection, turning security requirements into scalable, auditable engineering systems designed to reduce friction.

What You’ll Do

• Security Architecture: Lead the security architecture of GitLab's endpoint fleet, focusing on macOS.
• Automation: Design and support automation for secure endpoint deployment and lifecycle management using code-based workflows.
• Infrastructure-as-Code: Manage endpoint and SaaS security configurations through Terraform, version control, and CI/CD pipelines.
• Policy Enforcement: Define and enforce security baselines across macOS, iOS, Windows, and Linux.
• Collaboration: Partner with IT, Security Operations, and Detection teams to improve telemetry and response models.
• Mentorship: Mentor engineers and serve as a senior escalation point for complex endpoint security issues.

What You’ll Bring

• Experience designing and delivering endpoint or corporate security solutions in scalable environments.
• Deep knowledge of endpoint management platforms (e.g., Jamf Pro, FleetDM) and macOS security.
• Strong hands-on ability with Terraform and Infrastructure-as-Code practices.
• Experience with GitOps workflows (Git, merge requests, automated pipelines).
• Proficiency in scripting or programming (bash, Python, PowerShell, or Go).
• Familiarity with cloud identity providers (Okta, Google Workspace, LDAP).
• Ability to communicate clearly and work independently in an all-remote environment.

About the Team

The Corporate Security Engineering team treats security work as engineering work: building with code, operating through Git, and using reviewable, testable, and auditable workflows by default. We collaborate asynchronously to build controls that scale across GitLab's global workforce.