Engineering Manager, Software Supply Chain Security: Pipeline Security - Remote

Overview

The Engineering Manager specializes in the management of people, with a specific focus on Software Supply Chain Security. This role will lead a team building features within the Software Supply Chain Security stage, primarily focused on CI job artifact security as expressed via the SLSA compliance framework.

In Short

• Lead a team focused on developing features for Software Supply Chain Security.
• Guide the implementation of SLSA compliance framework into GitLab CI/CD pipeline features.
• Collaborate with Product Managers to define and prioritize the roadmap for Supply Chain Security features.
• Stay current with industry standards and best practices in software supply chain security.
• Partner with Security team members to ensure features meet the highest security standards.
• Educate and advocate for supply chain security best practices across GitLab.
• Represent GitLab in industry forums related to software supply chain security.

Requirements

• Experience with software supply chain security concepts and tools.
• Understanding of the SLSA framework and its application in CI/CD pipelines.
• Familiarity with software artifact provenance, attestation, and verification techniques.
• Knowledge of secure software development practices.
• Experience with CI/CD systems and their security considerations.
• Understanding of container security concepts.
• Familiarity with software composition analysis and vulnerability management.
• Experience implementing SLSA compliance in production environments is ideal.

Benefits

• Benefits to support your health, finances, and well-being.
• All remote, asynchronous work environment.
• Flexible Paid Time Off.
• Team Member Resource Groups.
• Equity Compensation & Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental leave.
• Home office support.