Director of Engineering, Security Factory
As Director of Engineering for the Security Factory, you'll lead the engineering organization responsible for GitLab's customer-facing security capabilities across its AI-powered DevSecOps platform. Reporting to the VP of Engineering, you'll set the engineering vision and multi-quarter roadmap for a distributed group of nine teams, including engineering managers, spanning proprietary scanners, AI-driven detection engines, agentic remediation flows, and security foundations. The role combines technical direction, cross-functional partnership with product management, and leadership of managers and individual contributors.
Responsibilities
- ▹Set the engineering vision and multi-quarter roadmap across teams working on proprietary scanners, AI-driven security workflows, research, vulnerability management, and security foundations.
- ▹Lead a distributed engineering organization of managers and individual contributors, focusing on team performance, engagement, and career development.
- ▹Drive architectural decisions for AI and machine learning detection engines, agentic remediation flows, and scalable scanning infrastructure.
- ▹Partner with product management to define priorities, shape requirements, and deliver security capabilities for regulated, security-conscious customers.
- ▹Own the engineering delivery of GitLab's proprietary application security scanners, agentic remediation workflows, and AI Security Research efforts.
- ▹Represent the Security Factory stage in cross-functional planning, executive reviews, security disclosures, and customer conversations.
- ▹Establish engineering standards for delivery, observability, incident response, scanner quality, and code quality.
Requirements
- ▹Experience leading engineering organizations with multiple teams and managers in a distributed environment.
- ▹Strong understanding of application security fundamentals, including SAST, Software Composition Analysis, secret detection, vulnerability management, and software supply chain security.
- ▹Experience building detection, analysis, or scanning systems in a SaaS or DevSecOps environment, including trade-offs across precision, recall, latency, and scale.
- ▹Direct experience shipping a customer-facing AI or machine learning product feature tied to detection or remediation quality outcomes.
- ▹Ability to partner closely with product management on roadmap planning, prioritization, and requirements.
- ▹Strong written communication skills and comfort leading through clear documentation in a remote, async-first organization.
Nice to have
- ▹Familiarity with agentic AI systems, AI agent orchestration, threat intelligence research, or open source security tooling.
Soft skills
What we offer
- ▹Flexible paid time off.
- ▹Team Member Resource Groups.
- ▹Equity compensation and Employee Stock Purchase Plan.
- ▹Growth and Development Fund.
- ▹Parental leave.
- ▹Fully remote work.
About the company
GitLab is an intelligent orchestration platform for DevSecOps, trusted by more than 50 million registered users and over half of the Fortune 100. The company operates as an all-remote, async-first organization and embeds AI as a core productivity multiplier across its products and teams.