Intermediate Vulnerability Researcher, Ast: Vulnerability Research

GitLab

Remote
$98,000—$210,000 usd; not specified; not specified...
Remote
Vulnerability research and proof of concepts
Curate advisory databases
Build scanning efficacy benchmarks
GitLab is seeking an Intermediate Vulnerability Researcher to enhance their Application Security Testing offerings by researching software vulnerabilities and developing practical improvements. The ideal candidate will have experience in vulnerability detection, software composition analysis, and a collaborative mindset

Job Summary

  • As an Intermediate Vulnerability Researcher, AST: Vulnerability Research, you'll help improve how GitLab detects and understands software vulnerabilities across our Application Security Testing offerings.
  • You will research vulnerabilities and exploitation methods, turn findings into practical improvements, and help GitLab teams and customers get more accurate, useful security results.
  • The Vulnerability Research team at GitLab works closely with GitLab Security, Development, and Product to build, tune, and improve the efficacy of the security capabilities integrated into GitLab.

Matching Summary

Match Score: 85

GitLab is seeking an Intermediate Vulnerability Researcher to enhance their Application Security Testing offerings by researching software vulnerabilities and developing practical improvements. The ideal candidate will have experience in vulnerability detection, software composition analysis, and a collaborative mindset.

Salary

$98,000—$210,000 USD; Not specified; Not specified

Skills & Requirements

Must-have

  • Vulnerability research and proof of concepts
  • Curate advisory databases
  • Build scanning efficacy benchmarks
  • Assess security product output
  • Root cause analysis for security gaps
  • Technical report writing

Nice-to-have

  • AI as productivity multiplier
  • Continuous knowledge exchange
  • Co-create the future
  • Practical security research motivation

Key Requirements

  • Experience developing vulnerability detection
  • Knowledge of vulnerability management process
  • Understanding of software composition analysis
  • Experience with source code analysis
  • Knowledge of compilers and compiler design
  • Experience building automated security tools
  • Ability to contribute in product development

Work Rights

Not specified

Tailored Resume

Cover Letter