Intermediate Software Engineer, Security Factory: Vulnerability Management

Summary

GitLab is an intelligent orchestration platform for DevSecOps. The Intermediate Software Engineer will build and maintain backend security workflows for vulnerability triage, prioritization, reporting, and ingestion, primarily using Ruby on Rails, while collaborating across frontend, product, design, and security teams.

Responsibilities

• Develop and maintain backend features for GitLab’s vulnerability management workflows
• Confidently ship features and improvements with minimal guidance and support from other team members; collaborate with the team on larger projects
• Help improve the performance, reliability, and scalability of security data ingestion and reporting systems
• Collaborate with frontend engineers and contribute across the stack when needed
• Work with engineers across security teams as vulnerability data and workflows come together in Vulnerability Management
• Collaborate with Product Management and Product Design to maintain a high bar for quality
• Craft code that meets our [internal standards](https://docs.gitlab.com/development/contributing/style_guides/) for style, maintainability, and best practices for a high-scale web environment
• Conduct code reviews within our [Code Review Guidelines](https://docs.gitlab.com/development/code_review/) and ensure community contributions receive a swift response
• Recognize impediments to our efficiency as a team ("technical debt"), propose and implement solutions
• Participate in [on-call rotations](https://handbook.gitlab.com/handbook/engineering/on-call/) to assist troubleshooting product operations, security operations, and urgent engineering issues

Skills

• * Experience building and maintaining backend applications with Ruby on Rails
• * Experience delivering and maintaining software systems as part of a larger engineering team
• * The ability to investigate technical problems, ask for context when needed, and work toward a practical resolution
• * Experience working with relational databases such as PostgreSQL
• * Clear communication and collaboration skills in a distributed team
• * An interest in learning from others, sharing knowledge, and growing your technical skills
• * Frontend development experience, including JavaScript or Vue.js, is helpful
• * Experience with Elasticsearch, graph databases, vulnerability management, application security, or related transferable skills is helpful

Qualifications

Must Haves

• * Experience building and maintaining backend applications with Ruby on Rails
• * Experience delivering and maintaining software systems as part of a larger engineering team
• * The ability to investigate technical problems, ask for context when needed, and work toward a practical resolution
• * Experience working with relational databases such as PostgreSQL
• * Clear communication and collaboration skills in a distributed team
• * An interest in learning from others, sharing knowledge, and growing your technical skills

Nice to Haves

• * Frontend development experience, including JavaScript or Vue.js, is helpful
• * Experience with Elasticsearch, graph databases, vulnerability management, application security, or related transferable skills is helpful

Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave
• All of our roles are remote