Senior Threat Intelligence Engineer
GitLab
Remote, Canada; Remote, India; Remote, USremotePosted 1 month ago
Skill Required
Security OperationsSOCForensicsPythonGitLinuxDesign Patterns
Key highlights
- Salary: $140,000—$200,000 USD (United States)
- Experience Level: Seasoned / Senior
- Remote: All roles are remote globally
- Key Requirement: Python expertise for automation and AI
- Notable Benefit: Flexible Paid Time Off
- Role Type: Sole dedicated lead for the TI program
Role overview
GitLab is looking for a seasoned Threat Intelligence Engineer to join as a dedicated Senior Security Engineer, TI. You will join a program established a couple of years ago with a solid foundation of reporting templates, tooling, feeds, and industry connections, serving as the sole dedicated member of the team to refine processes and iterate towards a more mature threat intelligence program. Your mission is to provide actionable intelligence that empowers GitLab to make informed, proactive decisions, using intelligence to anticipate attacks before they materialize. You will leverage hands-on technical skills and Python expertise to monitor GitLab’s unique threat landscape, collaborate across security and infrastructure teams, and build meaningful relationships with industry peers to share intelligence.
Responsibilities
- Monitor the threat landscape, identifying and analyzing the risks most relevant to GitLab and raising awareness through ad-hoc Flash Reports.
- Administer our Threat Intelligence Platform and continue building out our open source, proprietary and internal intelligence collection pipeline.
- Support incident response through malware analysis and threat actor tracking helping us stay one step ahead of our top threats.
- Collaborate on Purple Team Flash Operations, where emerging threats are turned into collaborative exercises to validate and improve our defensive capabilities.
- Build meaningful relationships with industry peers, sharing intelligence and collaborating on emerging threats.
- Write code, leverage AI, and build automation to improve process efficiencies on the team.
- Incorporate AI into daily workflows to drive efficiency, innovation, and impact.
- Monitor our unique threat landscape, focusing on credible threats to GitLab and the software supply chain.
- Leverage Python expertise as a force multiplier, expanding capabilities through automation and AI.
- Maintain our Threat Intelligence Platform.
- Refine processes and iterate towards a more mature threat intelligence program.
- Uncover real-world attacks, make attributions, and build a thriving intel-sharing community.
- Collaborate across security, infrastructure, and product teams to help keep customers, platform, and organization secure.
Requirements
- Seasoned Threat Intelligence Engineer / Senior Security Engineer, TI.
- Strong hands-on technical skills.
- Python expertise.
- Proven track record of delivering actionable intelligence that has had a meaningful impact on the security of an organization.
- Experience working with a Threat Intelligence Platform (TIP) and managing ingested and exported threat feeds.
- Experience researching adversaries using OSINT and structured analytical techniques.
- Ability to automate tasks by writing basic scripts/programs, preferably with Python.
- Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.
Nice to have
- Optional but valuable: experience reverse engineering malware, particularly macOS and Linux malware and malware delivered via code repositories.
- Optional but valuable: public examples of blogs or open-source work related to threat intelligence.
- Interest from candidates with varying levels of experience; meeting every single requirement is not strictly required.
Benefits
- Benefits to support your health, finances, and well-being
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation & Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Additional details
- GitLab is the intelligent orchestration platform for DevSecOps, enabling organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation.
- More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
- GitLab embraces AI as a core productivity multiplier; all team members are expected to incorporate AI into daily workflows.
- High-performance culture driven by values and continuous knowledge exchange.
- *Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
- The program features solid foundations built by the Security Operations team over the last couple of years (reporting templates, tooling, feeds, and industry connections).
- This role will be the sole dedicated member of a team within the Security Operations department.
- The role serves as a distinct function within the SecOps organization and as the primary lead for the threat intelligence program.
- There is local team presence in Australia, but the SIRT function operates as a globally distributed team.
- Security Operations includes SIRT, Trust & Safety, Signal Engineering, Red Team, and Security Logging.
- Supported by Security Operations engineers who dedicate a portion of their time to threat intelligence.
- The base salary range for this role’s listed level is currently for residents of the United States only: $140,000—$200,000 USD.
- Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location.
- The base salary range does not include any bonuses, equity, or benefits.
- Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
- GitLab hires new team members in countries around the world; all roles are remote, though some may carry specific location-based eligibility requirements.
- Recruitment Privacy Policy applies.
- GitLab is an equal opportunity workplace and an affirmative action employer.
- Policies relating to recruitment and advancement are based solely on merit, regardless of protected characteristics.
- Disability or special need accommodations are available during the recruiting process.