Staff Software Engineer, Static Analysis at GitLab
Confirmed open
Lead GitLab static-analysis engine architecture and AI-assisted evaluation; remote only in Canada, Israel, the UK or the United States.
Search jobs by company: GitLab
See how to apply
Save job — free account Saved jobs
Create a free application profile — Keep your skills and projects in a reusable profile. Private by default; you choose when to share. Apply for this job directly with the employer.
By continuing, you agree to processing needed to manage your account and profile. Privacy policy
Role overview
The Security Factory Code Scanning team builds tools to detect vulnerabilities in source code. This staff engineer defines the long-term engine architecture.
Responsibilities
- Design parsing, symbol resolution, intermediate representations, call graphs and taint/data-flow analysis across languages.
- Define specifications for engineers and coding agents, evaluate detection against vulnerable benchmark applications, mentor the team and support on-call.
Qualifications
- Deep static/program analysis and application-security expertise, including CWE/OWASP detection, plus production Rust, Go or similar systems programming.
- Experience directing and evaluating LLM coding workflows, performance work, CI/CD and clear architectural communication.
Technology in this role
- Go: Deep static/program analysis and application-security expertise, including CWE/OWASP detection, plus production Rust, Go or similar systems programming.
How to apply
Review the original posting and apply through the employer’s careers page.
View source and applySource checked: 2026-11-08
Browse job categories
Related jobs
- Senior Software Engineer, Code Security at GitLab — GitLab
- Intermediate Software Engineer, Security Factory: Vulnerability Management at GitLab — GitLab
- Senior Infrastructure Security Engineer at Zapier — Zapier
- Cloud Infrastructure Security Engineer at Runpod — Runpod
- Security Engineer at Deepgram — Deepgram
- Senior Security Engineer, Offensive Security at Docker — Docker