Principal Security Architect - Remote

Overview

We are seeking a Principal Security Architect to join our Security Platforms & Architecture Team and be responsible for the identification, assessment, prioritization, and reduction of systemic risks associated with the GitLab product and architecture.

In Short

• Lead the development and execution of the security strategy and roadmap.
• Develop expert-level knowledge of GitLab’s platform architecture.
• Work cross-organizationally to create remediation plans for key security risks.
• Conduct security architecture reviews for large strategic projects.
• Drive continuous improvement of security architecture practices.
• Provide expert guidance and mentorship to security engineers.
• Anticipate emerging security challenges and propose solutions.
• Support GitLab Dedicated for Government teams as needed.
• Establish clear expectations for secure software delivery.
• Cultivate strong relationships across Product and Engineering.

Requirements

• Proven experience analyzing software supply chain security risk.
• Strong background in application security and product security.
• Deep expertise in risk assessment, secure system design, and threat modeling.
• Extensive experience securing modern application architectures.
• Strong understanding of DevSecOps practices.
• Demonstrated ability to translate complex security concepts.
• Proven track record of driving complex security initiatives.
• Experience supporting government-related security requirements is a plus.
• Expertise in emerging technology, like AI, is desirable.
• Understanding of security certifications and frameworks is beneficial.

Benefits

• Benefits to support your health, finances, and well-being.
• All remote, asynchronous work environment.
• Flexible Paid Time Off.
• Equity Compensation & Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental leave.
• Home office support.