Senior Software Security Engineer

What you’ll do

• Maintain core abuse prevention systems and build new abuse detection rules to identify and prevent evolving platform abuse such as spam, AI/token, SEO optimization/redirects and other financially motivated abuse campaigns.
• Become a core maintainer for our in-house abuse platform (Ruby on Rails monolith) and be comfortable supporting and building new features for the platform.
• Improve and expand agentic AI capabilities in our abuse mitigation tools, including improving multi agent reasoning decision patterns with a target to reduce HITL operational load.
• Lead collaboration with peer engineering teams to deliver safety improvements for the GitLab product.
• Resolve automation gaps and create efficient, automated processes.
• Create and maintain documentation such as runbooks and procedures.

What you’ll bring

• Strong software development skills with experience in Ruby/Rails.
• Experience working on distributed applications with large codebases and deployed in cloud environments strongly preferred.
• Passion/desire to proactively develop security engineering skills.
• Comfortable working in an all remote environment where results and impact matter above hours worked.
• Strong experience with cloud native development (Google Cloud Platform (GCP) and/or AWS).
• Interest in “thinking like a hacker” and defending against attacks with an “automation first” mindset.
• Interest in handling trust and safety security incidents and collaborating with engineering to harden platform defenses to combat abuse campaigns.
• Experience working on an AI native development team maintaining teams of agents and acting as a code reviewer and experience abstracting your role away from writing code for most cases.