Senior Security Engineer, Security Incident Response Team (SIRT) - EMEA

About the Role

As a Senior Security Engineer on GitLab’s Security Incident Response Team (SIRT), you will play a critical role in defending GitLab.com and the broader environment against evolving security threats. This role operates on a compressed 4-day work schedule (shifts run Sunday–Wednesday or Wednesday–Saturday) to provide 24/7/365 coverage.

What You’ll Do

• Incident Response: Lead and coordinate end-to-end incident response for high-severity security events within a 24/7 global model (EMEA business hours).
• DFIR: Investigate complex security incidents across cloud environments using advanced Digital Forensics and Incident Response methodologies.
• Detection Engineering: Partner with Signals Engineering to design SIEM use cases, alerting strategies, and telemetry pipelines.
• Automation & AI: Build and enhance automation and AI-assisted workflows to improve triage, investigation speed, and response consistency.
• Collaboration: Partner with Threat Intelligence, Infrastructure, and Legal teams to contextualize threats and conduct root cause analysis (RCA).
• Documentation: Develop and maintain runbooks, playbooks, and operational documentation.
• Mentorship: Mentor other engineers to elevate the team’s overall incident response maturity.

What You’ll Bring

• Strong experience in security incident response and investigations in cloud-first environments.
• Hands-on experience with SIEM, EDR, and detection engineering.
• Proficiency with cloud platforms (AWS & GCP).
• Experience building automation using Python, scripting, or SOAR platforms.
• Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK).
• Experience using or administering Git/GitLab in a security or engineering context.
• Strong analytical skills and the ability to operate effectively in high-tempo environments.
• Excellent written communication skills.

How GitLab Supports You

• Flexible Paid Time Off
• Comprehensive health, financial, and well-being benefits
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave
• Team Member Resource Groups