Senior Security Engineer, Security Incident Response Team (SIRT) - EMEA - remote job

GitLab is hiring a Senior Security Engineer, Security Incident Response Team (SIRT) - EMEA - a senior role, so the employer expects you to make the calls yourself. The role sits in IT and programming and is fully remote. The company hires candidates based in Europe.

The employer did not publish a figure; that is settled at interview. The advert sets no condition on working hours.

This vacancy passed an automated check: the list excludes any advert requiring a foreign work permit, visa sponsorship, a particular citizenship, or residence in a specific country.

Introduction to GitLab and Its Culture

GitLab is a pioneering platform that integrates DevSecOps, enhancing developer efficiency, operational excellence, and security compliance while driving the acceleration of digital transformation. Over 50 million users and a significant majority of the Fortune 100* rely on GitLab to deliver better, more secure software at a faster pace.

At GitLab, the principles of innovation and collaboration are embedded in our daily operations. We harness AI as a key productivity tool, ensuring all team members integrate it into their workflows to boost productivity, foster creativity, and amplify impact. Join us to see your career flourish, innovation thrive, and diverse voices be heard. Our high-performance culture thrives on shared values and continuous knowledge exchange, empowering every team member to achieve their full potential while collaborating with industry leaders to tackle complex challenges. Co-create the future with us as we build cutting-edge technology that transforms the global software development landscape.

*Note: Fortune 500® is a trademark of Fortune Media IP Limited, used under license. The claim is based on GitLab's internal data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with or endorse GitLab.

Role Overview

As a Senior Security Engineer on GitLab’s Security Incident Response Team (SIRT), you will be pivotal in safeguarding GitLab.com and our broader infrastructure against emerging security threats. You will lead significant incident response efforts, drive the continuous enhancement of our defense, detection, and response mechanisms, and help scale our security operations through automation and intelligent workflows.

Operating in a 24/7, global setting (following the sun model), you will oversee incidents from start to finish—detection, triage, containment, eradication, and recovery—while collaborating cross-functionally to bolster our overall security stance.

A core part of this role involves leveraging automation and AI-driven strategies to enhance detection accuracy, accelerate investigations, and minimize response times. You will play a key role in shaping our approach to modern security tools and data to stay ahead of evolving threats.

This position is perfect for individuals who thrive in dynamic environments, possess deep Digital Forensics and Incident Response (DFIR) expertise, and are equally passionate about operational excellence and building scalable detection and response systems and workflows.

Daily Responsibilities

- Coordinate and lead comprehensive incident response for high-priority security events within a 24/7 global on-call framework, focusing on EMEA business hours. - Provide clear and concise executive communications during security incidents. - Conduct in-depth investigations of complex security incidents across various cloud environments, utilizing robust DFIR methodologies. - Collaborate with Signals Engineering to design and implement detection strategies, including SIEM use cases, alerting methods, and telemetry pipelines. - Develop and refine automation and AI-driven workflows to expedite triage, investigation, and response consistency. - Work closely with Threat Intelligence to contextualize threats and enhance detection coverage. - Perform root cause analysis and lead post-incident reviews to drive continuous improvement and reduce risk. - Create and maintain runbooks, playbooks, and operational documentation. - Engage in cross-functional collaboration during incidents and spearhead proactive initiatives such as tabletop exercises. - Mentor other engineers and contribute to raising the overall incident response maturity of the team.

Qualifications

- Extensive experience in security incident response and investigations in cloud-first environments. - Practical experience with Git/GitLab in a security or engineering context. - Proficiency with SIEM, EDR, and/or detection engineering tools. - Expertise in cloud platforms like AWS and GCP. - Familiarity with threat intelligence and adversary tactics, such as MITRE ATT&CK. - Background in building or working with automation tools (e.g., Python, scripting, SOAR platforms). - Interest or experience in applying AI/ML or data-driven techniques to detection, triage, or response workflows. - Strong analytical and problem-solving skills, capable of operating effectively during severe incidents. - Excellent written communication skills with a commitment to producing clear, actionable documentation. - Growth mindset and proactive approach to identifying and mitigating security risks.

About the Team

The Security Incident Response Team (SIRT) is a globally distributed group of engineers based in AMER, APAC, and EMEA. We are proactive and reactive, leading security investigations, incident response, and resolution, as well as conducting cyber threat analysis and detection and response engineering. Despite the global nature of the team, we collaborate effectively through automation and established processes to resolve incidents, manage handovers, and work together on projects.

GitLab Employee Benefits

- Comprehensive health, financial, and well-being support. - Flexible Paid Time Off. - Team Member Resource Groups. - Equity Compensation and Employee Stock Purchase Plan. - Growth and Development Fund. - Parental Leave.

GitLab actively seeks candidates of all experience levels; many successful applicants do not meet every requirement. If you are enthusiastic about this opportunity, apply and allow our recruiters to evaluate your application.

Country Hiring Guidelines

GitLab recruits new team members globally, with all positions being remote. Some roles may have specific location eligibility requirements. Our Talent Acquisition team can provide details after the initial application process.

Privacy Policy

Please review our Recruitment Privacy Policy for more information on how your data is handled.

GitLab is committed to being an equal opportunity employer and an affirmative action employer. Our policies and practices related to recruitment, employment, career development, and advancement are based solely on merit, without regard to race, color, religion, ancestry, sex, national origin, age, citizenship, marital status, disability, genetic information, discharge status from the military, protected veteran status, or any other characteristic protected by law. For more information, see GitLab’s EEO Policy and EEO is the Law. If you require accommodation due to a disability, please inform us during the application process.