Staff Security Researcher

A staff researcher on GitLab's Application Security team, reporting to the Senior Manager of Application Security, who probes the platform's AI features, including the Duo Agent Platform and Duo Chat, along with the wider codebase and the open source projects GitLab integrates. The researcher specialises in at least two areas, finds chained and systemic flaws, proves them with working exploits, helps define security requirements for AI surfaces, builds agent-assisted discovery tooling and feeds clear remediation advice back to engineers.

GitLab wants seven or more years of vulnerability research, pentesting or other offensive work, proficiency in Ruby, Go, Python, TypeScript or Rust, and an understanding of prompt injection and agent manipulation. OSCP, OSCE or GPEN is a plus. Remote in the US, Canada, the UK or Israel.