- Company: GitLab
- Location: Remote, United Kingdom
- Job type: Full-time
- Salary: Not specified for UK (Poland range: 272,000 – 408,000 PLN)
About the role
GitLab is looking for a Threat Research Engineer to join the Security Factory team. In this full-stack position, you will take security research ideas from initial concepts to working proof of concepts. You will deploy these solutions and analyze the results independently. AI is central to this role, as you will build agentic workflows for research, analysis, and detection while using AI tools daily to enhance efficiency.
Responsibilities
- Research new attack surfaces and threat vectors, including AI coding agents and package ecosystems.
- Identify and responsibly disclose vulnerabilities in open-source projects and developer tools.
- Analyze software supply chain incidents and events.
- Build and maintain AI-powered workflows and agents that automate research and detection.
- Develop and maintain cloud-based systems supporting detection and advisory work.
- Improve the quality and coverage of vulnerability and malware advisories.
- Write blog posts and present findings at conferences.
- Participate in on-call or operational support as required by the team’s ownership model.
Requirements
- Hands-on security experience in research, malware analysis, penetration testing, or security tooling.
- Demonstrated experience using AI in real work, such as building with LLM APIs or agent frameworks like LangChain or LangGraph.
- Strong programming skills in Go or Python, with good software engineering practices including testing and CI/CD.
- Experience deploying and running production services on a public cloud.
- Understanding of package ecosystems and software supply chain attacks.
- Ability to map attack vectors, make data-driven decisions, and balance quality with speed.
- Clear writing skills to explain findings to engineers and general audiences.
- Helpful but not required: Published vulnerability findings, security research on AI agents or MCP servers, GCP experience, or infrastructure as code experience with Terraform or OpenTofu.
Pay and benefits
- Flexible Paid Time Off.
- Equity Compensation and Employee Stock Purchase Plan.
- Growth and Development Fund.
- Parental Leave.
- Team Member Resource Groups.
- Base salary ranges are determined by location, experience, and market data. The listed range for Poland is 272,000 – 408,000 PLN.
How to apply
Apply directly on GitLab’s own careers website. Omadaily never charges job seekers.
