Intermediate Backend Engineer - Code Security
GitLab Inc. (company site, opens in a new tab)BengaluruOn-siteDirect career pageEst. 20–40 LPA
Posted 22h ago
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Reach people at GitLab Inc.
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at GitLab Inc. you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Develop and extend backend services for code security focusing on dependency analysis, vulnerability detection, and automated remediation.
- Implement and evaluate hybrid analyzers combining deterministic and AI-driven detection to find security vulnerabilities across various package ecosystems.
- Maintain, enhance, and troubleshoot security scanning tools and CI integrations, including participation in on-call rotations for operational issues.
Minimum Requirements
- Professional experience writing and testing production code in systems languages like Go and/or Rust; willingness to work across Ruby and Python is required.
- Experience using AI or large language model (LLM) tools to generate or evaluate technical content with sound judgment.
- Work Experience Required: Not explicitly mentioned in the JD.
- Ability to work independently in a remote, asynchronous environment with clear technical communication skills.
Ideal Candidate Profile
- Familiar with software supply chain security concepts and common vulnerability classes such as OWASP Top 10 and CWE or eager to develop this expertise.
- Experience or interest in combining static analysis with AI to enhance security tooling effectiveness and reduce false positives.
- Comfortable working in a globally distributed asynchronous team, handling moderate technical complexity and supporting CI/CD and containerized environments.