🤖 15+ AI Agents working for you. Find jobs, score and update resumes, cover letter, interview questions, missing keywords, and lots more.
Cookies & analytics consent
We serve candidates globally, so we only activate Google Tag Manager and other analytics after you opt in. This keeps us aligned with GDPR/UK DPA, ePrivacy, LGPD, and similar rules. Essential features still run without analytics cookies.
Read how we use data in our Privacy Policy and Terms of Service.
🤖 15+ AI Agents working for you. Find jobs, score and update resumes, cover letter, interview questions, missing keywords, and lots more.
Gitlab
Role & seniority: Engineering Manager for Composition Analysis and Dynamic Analysis (security-focused, leadership of multiple engineering teams)
Stack/tools: application security scanning (software composition analysis, container scanning, API security, dynamic application security testing, fuzz testing); OSS/tools (e.g., OWASP ZAP, Trivy); depends on security tooling and dependency management
Lead and align engineers across Composition Analysis and Dynamic Analysis groups; set priorities and expectations
Drive security initiatives (auto-remediation of vulnerable dependencies, scanning unmanaged C/C++ deps, static reachability analysis, snippet detection) and improve the DAST crawler
Plan and coordinate epics across groups, manage agile delivery, governance, and architecture for scalable, cohesive security capabilities
Experience leading multiple technical teams, ideally in application security
Practical knowledge of software composition analysis, DAST, API security, and web app security testing
Familiarity with containerization, dependency management, and OSS security tooling
Ability to plan/run agile processes across several teams; guide security product architecture
Open source security tooling experience; transferable security engineering/DevSecOps background
Prior work in vulnerability management or security automation initiatives
GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating human progress. Our platform unites teams and organizations, breaking down barriers and redefining what's possible in software development. Thanks to products like Duo Enterprise and Duo Agent Platform, customers get AI benefits at every stage of the SDLC.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. An overview of this role As an Engineering Manager for Composition Analysis and Dynamic Analysis, you’ll lead multiple teams building the application security scanning capabilities that help GitLab customers find and fix vulnerabilities in their software supply chain and web applications. You’ll guide engineers working on software composition analysis, container scanning, API security, dynamic application security testing, and fuzz testing, and you’ll be responsible for setting priorities, shaping product architecture, and running agile processes across these groups so that our security offerings stay effective, reliable, and easy to use in real DevSecOps environments. You’ll balance complex, security-focused roadmaps, author project plans that span both groups, and coordinate their work so that customers get a cohesive, end-to-end application security experience within GitLab. In your first year, you’ll drive key initiatives like auto-remediation of vulnerable packages, scanning unmanaged C/C++ dependencies, static reachability analysis at the function level, snippet detection for open source dependencies, and significant improvements to the DAST crawler’s efficiency and stability.
Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.