Join our companies in their quest to drive powerful, positive, change that endures.

Manager, Infrastructure Security



Other Engineering
United States · Remote
Posted on Thursday, February 8, 2024

The GitLab DevSecOps platform empowers 100,000+ organizations to deliver software faster and more efficiently. We are one of the world’s largest all-remote companies with 2,000+ team members and values that foster a culture where people embrace the belief that everyone can contribute. Learn more about Life at GitLab.

An overview of this role

Infrastructure Security plays a critical role in GitLab as it holds responsibility for securing the infrastructure components that constitute our public cloud, cloud native, and software pipeline environments. In this high visibility role you’ll be responsible for setting the overall vision and strategy for infrastructure security within GitLab. You’ll work with the broader product security organization to help improve the overall cyber resilience of the GitLab product set for both cloud and self-hosted customers.

Relevant Links:

What you’ll do

  • Develop and implement the infrastructure security team’s vision and strategic roadmap
  • Own and be responsible for securing
    • GitLab’s customer-facing infrastructure which encompasses our multi-tenant, dedicated, government, and on-prem architectures.
    • Infrastructure that supports GitLab’s software supply chain.
  • Provide professional guidance and input on infrastructure security within and outside of your team
  • Collaborate with other security teams in support of
    • cross-team security efforts
    • Process improvements
    • Driving down risk across the organization
  • Build collaborative cross-functional partnerships with teams across
    • Infrastructure Engineering
    • Engineering and Development
    • Product Management; and
    • Legal
  • Manage an existing high performing team of infrastructure security professionals along with hiring new members as appropriate
  • Lead and mentor your team by
    • helping grow their skills and experience
    • fostering a culture of continuous improvement
    • holding regular 1:1’s
    • being your team’s role model in terms of exemplifying GitLab company values, positive thinking, and managing conflict
  • Establish and implement security policies, procedures, standards, and guidelines in support of infrastructure security
  • This position reports to the VP of Product Security and be expected to
    • Draft and successfully deliver on quarterly Objectives and Key Results (OKRs)
    • Align vision and roadmap with the broader product security strategy

What you’ll bring

  • Experience with:
    • Public cloud security
      • Ideally, practical experience with site-reliability engineering
    • CI/CD at a practitioner level
    • Google Cloud Platform or Amazon Web Services
    • Docker, Kubernetes, Cloud Native technologies and Serverless technologies
    • Managing SaaS infrastructure security related issues especially within regulated environments such as FedRAMP and GDPR
    • leading and implementing automation implementations in the service of infrastructure security (things like CSPM, Ansible, Terraform, etc)
  • Knowledge of:
    • infrastructure security issues, mitigations, and a solid grasp of the current global threat landscape
    • Distributed architectures
    • Systems design at an infrastructure component level
    • Threat modeling at the infrastructure level
    • Trends and practices in AI security at the infrastructure level
  • Strongly skilled in:
    • communication, including verbal, written
    • presentation skills to a variety of stakeholders
    • Collaborating with a global and diverse workforce
    • Adapting to evolving circumstances, technologies, and strategic priorities, while leading complex initiatives
    • Managing and developing teams of at least 10 people
  • Able to:
    • deliver results that are “good enough” in the face of ambiguity and imperfect knowledge
    • excel in a remote-only, asynchronous, multicultural, and distributed environment
  • Alignment with Manager responsibilities as outlined in Leadership at GitLab
The base salary range for this role’s listed level is currently for residents of listed locations only. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, and alignment with market data. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
Colorado/Washington pay range
$140,000$270,000 USD
California/New York/New Jersey pay range
$140,000$270,000 USD

Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.

Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.

GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.