Threat Research Engineer, Security Factory: Threat Research
- Where you can live
- Remote, Israel; Remote, Poland; Remote, United Kingdom
- Working hours
- Overlap with UTC+0 to UTC+2
- Salary
- Not published
- Posted
- November 11, 2026
Summary from the posting
The Threat Research group researches security threats as they emerge and turns what we learn into protection for GitLab customers. We maintain the GitLab Advisory Database, which powers GitLab’s dependency scanning. We also build detection capabilities, do original vulnerability research, and publish what we find. Recent work includes the Shai-Hulud npm worm and a critical remote code execution vulnerability in Serena, a popular MCP coding agent. You can read more on the Security Labs blog.
The base salary range for this role’s listed level is currently for residents of the EU, applicable in the specified country or countries only.
This is a short summary. The full description, requirements and the application form are on GitLab's own career page.