🎯 招聘雷达

📚 学习点

• DevSecOps: SAST/DAST 入流水线
• 60h → 简历可写「把安全工具链接进 CI/CD」
• Python: 已有基础
• 查漏 → 简历可写「Python 工程化」
• Rust: Rustlings+实战 80h → 简历可写「Rust 系统编程」

📄 原文

<div class="content-intro"><p>GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.</p> <p>The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values&nbsp;and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. <a href="https://www.youtube.com/watch?v=OuZIb5zszQI">Co-create the future with us</a> as we build technology that transforms how the world develops software.</p> <p>*<em>Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.</em></p></div><h4><strong>An overview of the role</strong></h4> <p>We are seeking a Principal Security Researcher to join our<a href="https://handbook.gitlab.com/handbook/security/product-security/security-platforms-architecture/"> </a>Application Security Team to conduct cutting-edge security research on GitLab's AI-powered DevSecOps capabilities. As GitLab transforms software development through intelligent collaboration between developers and specialized AI agents, we need security researchers who can proactively identify and validate vulnerabilities before they impact our platform or customers.</p> <p>In this role, you'll be at the forefront of security research, working with our GitLab DevSecOps platform, Duo Agent Platform, GitLab Duo Chat, and AI workflows that represent the future of human/AI collaborative development. You'll develop novel testing methodologies (including for AI agent security), conduct hands-on penetration testing, and translate emerging threats into actionable security improvements. Your research will directly influence how we build and secure the next generation of AI-powered DevSecOps tools, ensuring GitLab remains the most secure software factory platform on the market.</p> <p>This position offers the unique opportunity to shape security and AI security practices in one of the world's largest DevSecOps platforms, working with engineering teams who are pushing the boundaries of what's possible with AI-assisted software development. You'll have access to cutting-edge AI systems and the freedom to explore creative attack scenarios while contributing to the security of millions of developers worldwide.</p> <p>This role reports to the Senior Manager of Application Security.</p> <h4><strong>What you'll do&nbsp;</strong></h4> <ul> <li>Conduct and lead security research projects across multiple functional areas.</li> <li>Identify novel, systemic, and chained vulnerabilities in GitLab, where individual weaknesses combine for outsized impact.</li> <li>Validate security vulnerabilities through hands-on testing, developing proof-of-concept exploits that demonstrate real-world attack scenarios.</li> <li>Assess emerging industry vulnerability classes against the GitLab codebase, and drive remediation of the class rather than the instance.</li> <li>Lead security research into GitLab's AI and agentic surfaces, and define the security requirements that engineering teams build against.</li> <li>Build and direct the tooling and automation that scales security research, including agent-assisted vulnerability discovery across our codebase.</li> <li>Research the security posture of open source tools and dependencies integrated with GitLab, report findings to their maintainers, and track mitigation following our <a href="https://about.gitlab.com/security/disclosure/">responsible disclosure guidelines</a>.</li> <li>Solve technical problems of the highest scope, complexity, and ambiguity.</li> <li>Help shape the team and sub-department roadmap.</li> <li>Lead the integration of security research results into the engineering and business functions that need to act on them.</li> <li>Teach, mentor, and advise other domain experts and individual contributors across several teams.</li> <li>Share knowledge and novel vulnerability types with the security community.</li> </ul> <h4><strong>What you'll bring</strong></h4> <ul> <li>10+ years of experience in security research, penetration testing, or offensive security roles</li> <li>Strong ability in discovering and exploiting vulnerabilities in large codebase and complex systems</li> <li>Proficiency in two or more of Ruby, Go, Python, TypeScript, or Rust.&nbsp;</li> <li>Ability to read and analyze code across multiple languages and codebases</li> <li>Strong knowledge of AI frameworks</li> <li>Strong understanding of AI attack vectors including prompt injection, agent manipulation, and workflow exploitation</li> <li>At ease in establishing and driving complex remediation initiatives involving cross-functional teams</li> <li>Excellent written communication skills with an ability to articulate complex topics in a clear and concise manner.</li> <li>Ability to translate complex technical findings into clear risk assessments and remediation recommendations</li> <li>Strong analytical and problem-solving skills with creative thinking about attack scenarios</li> <li><strong>Nice to Have: </strong>Published security research or conference presentations; background in software engineering with distributed systems expertise; experience with GitLab or similar DevSecOps platforms</li> </ul> <h4><strong>About the team</strong></h4> <p>Security Researchers are a part of our<a href="https://handbook.gitlab.com/handbook/security/product-security/security-platforms-architecture/"> </a>Application Security team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. We focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering's development velocity.</p><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p><em>The base salary range for this role’s listed level is currently for residents of the&nbsp;United States only. This range is intended to reflect the role's base salary rate in locations throughout the US.&nbsp;Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data,&nbsp;and geographic location.&nbsp;The base salary range does not include any bonuses, equity, or benefits. See more information on our <a class="waffle-rich-text-link" href="https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/" data-sheets-formula-bar-text-link="https://bit.ly/GLBeneUS" data-sheets-formula-bar-text-style="font-size:12px;color:#1155cc;font-weight:normal;text-decoration:underline;font-family:''Arial'';font-style:normal;text-decoration-skip-ink:none;">benefits</a><span data-sheets-formula-bar-text-style="font-size:12px;color:#000000;font-weight:normal;text-decoration:none;font-family:'Arial';font-style:normal;text-decoration-skip-ink:none;"> and </span><a class="waffle-rich-text-link" href="https://about.gitlab.com/handbook/stock-options/" data-sheets-formula-bar-text-link="https://bit.ly/GLequity" data-sheets-formula-bar-text-style="font-size:12px;color:#1155cc;font-weight:normal;text-decoration:underline;font-family:''Arial'';font-style:normal;text-decoration-skip-ink:none;">equity</a>. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.</em></p></div><div class="title">United States Salary Range</div><div class="pay-range"><span>$203,200</span><span class="divider">&mdash;</span><span>$275,000 USD</span></div></div></div><div class="content-conclusion"><h4><strong>How GitLab Supports Full-Time Employees</strong></h4> <ul> <li><a href="https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/">Benefits to support your health, finances, and well-being</a></li> <li><a href="https://handbook.gitlab.com/handbook/people-group/time-off-and-absence/time-off-types/#flexible-paid-time-off-pto">Flexible Paid Time Off&nbsp;</a></li> <li><a href="https://handbook.gitlab.com/handbook/company/culture/inclusion/tmrg-tmag/">Team Member Resource Groups</a></li> <li><a href="https://handbook.gitlab.com/handbook/total-rewards/stock-options/">Equity Compensation &amp; Employee Stock Purchase Plan</a></li> <li><a href="https://handbook.gitlab.com/handbook/people-group/learning-and-development/growth-and-development/">Growth and Development Fund</a></li> <li><a href="https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/#parental-leave">Parental Leave</a>&nbsp;</li> </ul> <p>Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from <a href="https://about.gitlab.com/company/culture/inclusion/#examples-of-select-underrepresented-groups">underrepresented groups</a> are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.</p> <hr> <p><strong>Country Hiring Guidelines: </strong>GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.&nbsp;&nbsp;</p> <p><strong>Privacy Policy: </strong>Please review our <a href="https://handbook.gitlab.com/handbook/hiring/candidate-faq/recruitment-privacy-policy/" target="_blank">Recruitment Privacy Policy.</a> Your privacy is important to us.</p> <p>GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also&nbsp;<a href="https://about.gitlab.com/handbook/people-policies/inc-usa/#equal-employment-opportunity-policy" target="_blank">GitLab’s EEO Policy</a>&nbsp;and&nbsp;<a href="https://about.gitlab.com/handbook/labor-and-employment-notices/#eeoc-us-equal-employment-opportunity-commission-notices" target="_blank">EEO is the Law</a>. If you have a disability or special need that requires&nbsp;<a href="https://about.gitlab.com/handbook/people-policies/inc-usa/#reasonable-accommodation" target="_blank">accommodation</a>, please let us know during the&nbsp;<a href="https://about.gitlab.com/handbook/hiring/interviewing/#adjustments-to-our-interview-process" target="_blank">recruiting process</a>.</p></div> Find more English Speaking Jobs in United Kingdom on Arbeitnow

🇨🇳 全文翻译

<div class="content-intro"><p>GitLab 是面向 DevSecOps 的智能编排平台。GitLab 帮助组织提升开发者生产力、改善运营效率、降低安全与合规风险，并加速数字化转型。超过 5000 万注册用户以及超过 50% 的《财富》100 强企业*信任 GitLab，以更快交付更优质、更安全的软件。</p> <p>我们产品中内置的原则同样体现在我们团队的工作方式中：我们将 AI 视为核心生产力倍增器，所有团队成员都应将 AI 融入日常工作流程，以推动效率、创新和影响力。GitLab 是职业加速发展、创新蓬勃生长、每一个声音都被重视的地方。我们的高绩效文化由我们的价值观和持续的知识交流驱动，使团队成员在与行业领袖协作解决复杂问题的同时充分发挥潜能。<a href="https://www.youtube.com/watch?v=OuZIb5zszQI">与我们共同创造未来</a>，一起构建改变世界软件开发方式的技术。</p> <p>*<em>Fortune 500® 是 Fortune Media IP Limited 的注册商标，经许可使用。该声明基于 GitLab 数据。《财富》100 强指 2025 年 6 月发布的 2025 年《财富》500 强榜单中排名前 20% 的公司。Fortune 和 Fortune Media IP Limited 与 GitLab 无关联关系，且不为其产品或服务背书。</em></p></div><h4><strong>职位概述</strong></h4> <p>我们正在寻找一位首席安全研究员加入我们的<a href="https://handbook.gitlab.com/handbook/security/product-security/security-platforms-architecture/"> </a>应用安全团队，针对 GitLab 由 AI 驱动的 DevSecOps 能力开展前沿安全研究。随着 GitLab 通过开发者与专用 AI 智能体之间的智能协作变革软件开发，我们需要能够在漏洞影响我们的平台或客户之前主动识别并验证漏洞的安全研究员。</p> 在这个角色中，您将处于安全研究的前沿，利用我们的GitLab DevSecOps平台、Duo Agent Platform、GitLab Duo Chat以及代表人类/AI协作开发未来的AI工作流程。您将开发新颖的测试方法（包括针对AI代理安全性的测试），进行实践性的渗透测试，并将新兴威胁转化为可操作的安全改进。您的研究将直接影响我们如何构建和保护下一代AI驱动的DevSecOps工具，确保GitLab保持市场上最安全的软件工厂平台。 该职位提供了一个独特的机会，在世界最大的DevSecOps平台之一塑造安全和AI安全实践，与正在推动AI辅助软件开发可能性的工程团队合作。您将能够访问尖端的AI系统，并自由探索创造性的攻击场景，同时为全球数百万开发者的安全做出贡献。 该角色向应用安全高级经理汇报。 <strong>您将做什么</strong> - 在多个功能领域进行并领导安全研究项目。 - 识别GitLab中的新颖、系统性和链式漏洞，其中单个弱点结合产生超常影响。 - 通过实践测试验证安全漏洞，开发证明概念利用，展示现实世界的攻击场景。 - 评估新兴行业漏洞类别对GitLab代码库的影响，并推动类别的修复而非实例。 - 领导对GitLab的AI和代理表面的安全研究，并定义工程团队构建所依据的安全要求。 - 构建并指导扩展安全研究的工具和自动化，包括跨我们的代码库的代理辅助漏洞发现。 <li>研究与GitLab集成的开源工具和依赖项的安全状况，向维护者报告发现的问题，并按照我们的<a href="https://about.gitlab.com/security/disclosure/">负责任披露指南</a>跟踪缓解措施。</li> <li>解决最高范围、复杂性和模糊性的技术问题。</li> <li>帮助塑造团队和子部门的路线图。</li> <li>领导将安全研究成果整合到需要采取行动的工程和业务职能中。</li> <li>在多个团队中教授、指导和咨询其他领域专家和个人贡献者。</li> <li>与安全社区分享知识和新型漏洞类型。</li> </ul> <h4><strong>你将带来</strong></h4> <ul> <li>10年以上安全研究、渗透测试或进攻性安全角色的经验</li> <li>在大型代码库和复杂系统中发现和利用漏洞的强大能力</li> <li>精通Ruby、Go、Python、TypeScript或Rust中的两种或更多。&nbsp;</li> <li>能够阅读和分析跨多种语言和代码库的代码</li> <li>对AI框架有深入了解</li> <li>对AI攻击向量有深入理解，包括提示注入、代理操纵和工作流利用</li> <li>轻松建立和推动涉及跨职能团队的复杂补救计划</li> <li>出色的书面沟通能力，能够清晰简洁地阐述复杂主题。</li> <li>能够将复杂的技术发现转化为清晰的风险评估和补救建议</li> <li>强大的分析和解决问题的能力，对攻击场景有创造性思维</li> <li><strong>加分项：</strong>发表过安全研究或会议演讲；具有分布式系统专业知识的软件工程背景；有GitLab或类似DevSecOps平台的经验</li> </ul> <h4><strong>关于团队</strong></h4> 安全研究员是我们应用安全团队的一员，他们应对GitLab及其客户面临的复杂安全挑战，使GitLab成为市场上最安全的软件工厂平台。我们专注于系统性的产品安全风险，并跨部门合作以减轻这些风险，同时保持工程部门的开发速度。 此职位所列级别的基本薪资范围目前仅适用于美国居民。该范围旨在反映该职位在美国各地的基本薪资率。职级和薪资范围是通过面试以及对申请人的教育背景、经验、知识、技能、能力、与其他团队成员的公平性、市场数据的一致性以及地理位置的审查来确定的。基本薪资范围不包括任何奖金、股权或福利。更多信息请参见我们的福利和股权页面。销售职位还有资格获得目标高达所提供基本薪资100%的激励薪酬。 美国薪资范围 $203,200 — $275,000 USD GitLab如何支持全职员工 <ul> <li><a href="https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/">支持您健康、财务和福祉的福利</a></li> <li><a href="https://handbook.gitlab.com/handbook/people-group/time-off-and-absence/time-off-types/#flexible-paid-time-off-pto">灵活带薪休假</a></li> <li><a href="https://handbook.gitlab.com/handbook/company/culture/inclusion/tmrg-tmag/">团队成员资源小组</a></li> <li><a href="https://handbook.gitlab.com/handbook/total-rewards/stock-options/">股权补偿与员工购股计划</a></li> <li><a href="https://handbook.gitlab.com/handbook/people-group/learning-and-development/growth-and-development/">成长与发展基金</a></li> <li><a href="https://about.gitlab.com/handbook/total-rewards/benefits/general-and-entity-benefits/#parental-leave">育儿假</a></li> </ul> <p>请注意，我们欢迎具有不同经验水平的候选人表达兴趣；许多成功的候选人并未满足每一项要求。此外，研究表明，来自<a href="https://about.gitlab.com/company/culture/inclusion/#examples-of-select-underrepresented-groups">代表性不足群体</a>的人除非满足所有资格条件，否则不太可能申请工作。如果您对这个职位感到兴奋，请申请，让我们的招聘人员评估您的申请。</p> <hr> <p><strong>国家招聘指南：</strong>GitLab在全球各国招聘新团队成员。我们所有的职位都是远程的，但某些职位可能有特定的地点资格要求。我们的招聘团队可以在开始招聘流程后帮助回答有关地点的任何问题。</p> <p><strong>隐私政策：</strong>请查看我们的<a href="https://handbook.gitlab.com/handbook/hiring/candidate-faq/recruitment-privacy-policy/" target="_blank">招聘隐私政策。</a>您的隐私对我们很重要。</p> GitLab自豪地成为平等机会工作场所和积极行动雇主。GitLab在招聘、雇佣、职业发展和晋升、晋升以及退休方面的政策和实践完全基于绩效，不论种族、肤色、宗教、血统、性别（包括怀孕、哺乳、性取向、性别认同或性别表达）、国籍、年龄、公民身份、婚姻状况、精神或身体残疾、遗传信息（包括家族病史）、退伍状态、受保护的退伍军人身份（包括残疾退伍军人、最近分离的退伍军人、战时或战役徽章退伍军人以及武装部队服务奖章退伍军人），或任何其他受法律保护的基础。GitLab不会容忍基于任何这些特征的歧视或骚扰。另请参阅&nbsp;<a href="https://about.gitlab.com/handbook/people-policies/inc-usa/#equal-employment-opportunity-policy" target="_blank">GitLab的EEO政策</a>&nbsp;和&nbsp;<a href="https://about.gitlab.com/handbook/labor-and-employment-notices/#eeoc-us-equal-employment-opportunity-commission-notices" target="_blank">EEO是法律</a>。如果您有残疾或特殊需要需要&nbsp;<a href="https://about.gitlab.com/handbook/people-policies/inc-usa/#reasonable-accommodation" target="_blank">便利</a>，请在&nbsp;<a href="https://about.gitlab.com/handbook/hiring/interviewing/#adjustments-to-our-interview-process" target="_blank">招聘过程</a>中告知我们。</p></div> 在Arbeitnow上查找更多英国英语口语工作。

🔍 深度分析