Principal Field Security Engineer (US)

Acts as the main security contact for GitLab's enterprise customers within the Security Assurance organisation, part of a small team of four reporting to a Director. The engineer joins customer meetings, handles escalated questionnaires and RFPs, reviews security and compliance clauses in customer and vendor contracts, maintains the Trust Center, creates security content and equips field teams to discuss security.

GitLab wants ten or more years in information security, at least five customer-facing, with deep knowledge of SOC 2, ISO 27001, FedRAMP and NIST CSF, regulation such as GDPR, DORA and the EU AI Act, and contract negotiation experience. US citizenship is required. Remote.