Greenhouse ·
full-timeSenior Security Detection Engineer
Gitlab · Remote, United States
GitLab provides an intelligent orchestration platform for DevSecOps, helping organizations improve developer productivity, operational efficiency, and security while reducing compliance risk. The Senior Security Detection Engineer will join GitLab’s Detection Engineering team, which builds and maintains threat detection capabilities across corporate, cloud, and customer environments. Day‑to‑day work includes identifying MITRE ATT&CK and threat‑actor detection gaps, writing behavioral detections, and using SIEM or data‑lake tools such as Splunk or Elastic to create and troubleshoot rules. The role emphasizes automation, LLM‑assisted efficiencies, and agentic AI pipelines to streamline the detection lifecycle. The engineer will act as a detection architect, orchestrating agents, ensuring detection quality, and collaborating with incident response, red‑team, and threat‑intelligence teams to improve observability and coverage. Additional focus areas involve turning GitLab threat insights into actionable customer alerts and maintaining detection‑as‑code frameworks. The position suits candidates with proven detection engineering or SOC experience, strong SIEM/query skills, familiarity with behavioral detection methods, and preferably exposure to SaaS application security or agentic AI‑driven detection pipelines. Comfort with the GitLab product itself is a plus but not required.
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role You will join the growing Detection Engineering team at GitLab - responsible for building and maintaining a best in class detection engineering program. If you love writing threat detections, hunting for patterns of behavioral anomalies across GitLab corporate, cloud and customer environments as well as closing detection gaps you find, this team is for you! We thrive on writing, maintaining and testing our library of threat detections with a focus on automation, LLM aided efficiencies, and behaviors over atomic indicators. We’re looking for an engineer with strong experience building and deploying threat detections using agentic AI capabilities - if you’ve built end to end agentic powered detection pipelines, we want to talk to you! Bonus points if you are experienced in writing SaaS application detections, double bonus points if that application is GitLab! Part of this role will be focused on customer threat detection - turning GitLab threat insights into actionable customer alerts. Find out more about the Detection Engineering team and some of our publications: Build an automated detection testing framework with GitLab CI/CD and Duo Automating detection gap analysis with GitLab Duo Agent Platform Unveiling the GUARD framework to automate security detections at GitLab Automating cybersecurity threat detections with GitLab CI/CD What you’ll do Identify MITRE ATT&CK/top threat actor detection gaps and write behavioral detections to close them Be a detection SME and deeply understand GitLab’s detection methodology, DaC framework, detection types, and quality thresholds Act as a “detection architect” - orchestrating agents across the entire detection lifecycle and ensuring detection quality and consistency Use a SIEM/data lake platform like Splunk or Elastic to write and troubleshoot threat detections Collaborate with peer GitLab teams to identify and close security observability improvement opportunities Collaborate with incident response, red team, as well as threat intelligence to cross functionally improve GitLab’s detection program and coverage Use, maintain, and build new DaC, AI, and process efficiency automations for the signals engineering program What you’ll bring An understanding of the GitLab application, bonus points if you are comfortable detecting and hunting for attacks against GitLab or if you’ve maintained GitLab yourself. SOC, incident response or detection engineering expertise SIEM/security data lake detection and query expertise A proven ability to proactively detecting potentially malicious patterns and collaborating with incident response to complete incident RCAs to identify and implement new detection opportunities Strong Cloud (AWS/GCP) and some PaaS (Kubernetes/terraform) experience Experience orchestrating teams of agents to write detections - bonus points for experience building full end to end agentic detection pipelines Bring a passion for deep dive threat threat hunting and cross functional purple teaming and turning results into detections Experience with mature detection capabilities such as: Detections as Code, Signal vs detection development, risk based alerting, and behavior analytics. Due to government requirements, you must be a United States Citizen (defined as any individual who is a citizen of the United States by law, birth, or naturalization) to fill this position. About the team Detection Engineering is tasked with detecting suspicious and malicious events for GitLab, our customers and our SaaS operating environments. The Detection Engineering team works closely with peer teams in Security operations to simul
| Role | Senior Security Detection Engineer |
|---|---|
| Company | Gitlab |
| Location | Remote, United States |
| Type | full-time |
| Compensation | Not disclosed |
| Posted | 2026-10-07 |
| Deadline | Rolling |
Typical process for this type of role
A general guide — the exact steps for this specific listing may vary; check the original posting for details.
- 1ApplicationSubmit your resume through the apply link.
- 2ScreeningRecruiter reviews your background against the role.
- 3AssessmentA technical test, assignment, or coding round, depending on the role.
- 4Interview(s)One or more rounds with the hiring team.
- 5OfferOffer letter with compensation and start date.
Before you apply
0/4Senior Security Detection Engineer at Gitlab: frequently asked questions
- What is the salary for this role?
- Gitlab has not stated compensation in the listing. Check the original posting or ask during the application process.
- Is the Senior Security Detection Engineer position remote, hybrid or onsite?
- The listing marks this role as remote, with Remote, United States as the location.
- What is the application deadline?
- Gitlab has not listed a fixed deadline, so apply early in case the opening is filled.
- How do I apply for the Senior Security Detection Engineer role?
- Use the Apply button on this page. It opens the original listing on job-boards.greenhouse.io, where you submit your application with the company.
More at Gitlab
Other jobs at Gitlab
- Solutions Architect - SLED (east) · Remote, United States
- Senior Ecosystem Operations Manager · Remote, Canada; Remote, United States
- Senior Director, Dedicated Infrastructure & Platforms · Remote, Canada; Remote, United Kingdom; Remote, United States
- Partner Program Manager · Remote, United States
- Strategic Account Executive - Chicago · Remote, United States
Explore Related Placements
// similar opportunities
You might also like
Senior Security Engineer
Resilience Care
🏨 L'entreprise Resilience Care, acteur majeur de la télésurveillance médicale et partenaire de la recherche clinique, est une société française fondée en 2021 ...
Senior Security Engineer
Wavemm1
Our mission We're making Africa the first cashless continent. In 2017, over half the population in Sub-Saharan Africa had no bank account. That's for good reaso...
Senior Security Engineer
Voodoo
About Voodoo Founded in 2013, Voodoo is a tech company that creates mobile games and apps with a mission to entertain the world. Gathering 800 employees, 7 bill...
Senior Security Engineer
Dashlane
About Dashlane Dashlane’s mission is to deliver the credential security every business and employee needs to thrive. Millions of consumers, and over 25,000 bran...
Senior Security Engineer
Ddome
⭐ About the role : At DataDome, security is a core part of how we build and scale. Our security team already covers GRC, SecOps, and security leadership, and we...
Security Engineer (detection & Response)
Refractal
About Refractal Refractal is an AI security company building the infrastructure organisations need to defend against autonomous AI threats. 2026 has shown that ...