Staff Product Security Architect

A hands-on security architect in GitLab's Security Platforms and Architecture organisation, dedicated to the Core DevOps area of the product alongside peers covering AI and the Sec Section. The architect leads design work on strategic initiatives, threat models new and existing systems, reviews large projects with Application Security, builds prototypes to unblock teams, and acts as Security Owner for high-priority entries in the Product Security Risk Register. Decisions that keep coming up are turned into reusable guardrails, standards and threat models that plug straight into how engineers and their AI assistants write code.

The team wants depth in authentication and authorization design, multi-tenant isolation, distributed systems and supply chain security, plus a record of influencing engineering leaders through expertise. Remote across the US, Canada, the UK, Poland and Israel.