Senior Professional Services Engineer, Security

GitLab is an open core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating the rate of human progress. This mission is integral to our culture, influencing how we hire, build products, and lead our industry. We make this possible at GitLab by running our operations on our product and staying aligned with our values. Learn more about Life at GitLab.

Thanks to products like Duo Enterprise, and Duo Workflow, customers get the benefit of AI at every stage of the SDLC. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier. All team members are encouraged and expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact across our global organisation.

Professional Services Engineers engage with customers to provide installation, migration, training, and advisory services. They handle installations ranging from single-node Omnibus installs, to our largest reference architectures utilizing IaC/CaC, migrations from multiple systems to GitLab SaaS or self-hosted, and advisory services across the entire GitLab feature stack.

Professional Services Engineers are expected to be able to interface not only with the customer, but with our GitLab Product/Engineering teams, to find the best route for customer success, and to help drive improvements into GitLab features and processes.

What you'll do

• Technical Delivery

  • Design and implement secure GitLab solutions for Professional Services customer engagements from inception through delivery
  • Ensure security compliance and best practices throughout the software development lifecycle
  • Conduct security risk assessments and threat modeling for customer implementations
  • Stay current with security threats, compliance requirements, and GitLab security features (Product Security Risk Register)
  • Validate security controls and monitoring requirements are properly implemented
  • Implement migrations between security scanning tools (e.g., SonarQube, Checkmarx, Veracode to GitLab Security Scanners)

  Customer Engagement

  • Lead technical discovery sessions with security focus, understanding customer's compliance needs
  • Ensure deliverables meet customer security and compliance expectations
  • Coordinate and perform security implementation activities across internal teams, partners, and customers

  Knowledge Sharing and Practice Contributions

  • Mentor PS and partner consultants on security best practices and implementation strategies
  • Create security-focused documentation, delivery kits, and training materials
  • Review and contribute to PS security training materials and presentations
  • Develop security case studies, methodologies, and internal processes
  • Hold security enablement sessions for PS team members

  Cross-functional Collaboration

  • Provide input to GitLab Security teams on product security features and roadmap
  • Liaise with Training, Development, Support, and Product teams on security matters
  • Support Delivery Managers with security aspects of:
  • Technical vetting of partner consultants
  • New hire candidate evaluation
  • Support Program Managers with forecast and timeline estimates

What you'll bring

• Technical Expertise

  • Demonstrated experience in:
  • Security architecture and implementation
  • DevSecOps practices and tools
  • SCM migration with security controls
  • Secure cloud architecture and infrastructure
  • Configuration and Infrastructure as Code tools (Ansible, Terraform, etc)
  • CI/CD security integration
  • GitLab security features and capabilities
  • Security tool migration an