Senior Manager, Product Security Engineering (Security Posture & Supply Chain) - GitLab

About the Role

As the Senior Manager of the Security Posture Management (SPM) team, you will lead the effort to secure GitLab's own software factory. You will drive the governed rollout of security capabilities across our estate, act as 'Customer Zero' for GitLab's security features, and establish proactive software supply chain security as a core capability.

What You’ll Do

• Lead & Govern: Drive comprehensive rollouts of security capabilities, ensuring projects align with the Project Security Configuration Standard.
• Customer Zero: Capture friction points in security feature adoption and provide direct feedback to Product and Engineering teams to influence the roadmap.
• Supply Chain Security: Establish proactive governance for third-party components, dependency controls, and SBOM requirements.
• Risk Management: Own the Product Security Risk Register, metrics, and dashboards to provide a data-driven view of security posture.
• Compliance Partnership: Collaborate with Compliance teams to produce evidence for audits, certifications, and security maturity assessments.
• Team Leadership: Hire, coach, and grow a high-performing team while fostering an async, remote-first culture.
• Thought Leadership: Represent GitLab externally, sharing insights on how we secure our own software factory to build customer trust.

What You’ll Bring

• Experience managing security or engineering teams, including hiring and career development.
• Technical fluency in security posture management, software supply chain security, and SaaS estate configuration.
• A track record of driving broad, governed security rollouts across engineering organizations.
• Ability to translate security requirements into engineering-friendly controls.
• Experience with audit, certification, or GRC-related evidence gathering.
• Strong written communication skills, essential for our all-remote, async environment.
• Ability to drive impact under ambiguity and break large problems into iterative, shippable wins.

Benefits

• Flexible Paid Time Off
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Comprehensive health, financial, and well-being benefits
• Parental Leave
• Team Member Resource Groups