Intermediate Vulnerability Researcher, AST: Vulnerability Research

📋 Description

• Carry out vulnerability research and develop PoCs for GitLab security products.
• Curate advisory databases for dependencies; automate to reduce manual work.
• Build benchmarks to test scanner efficacy across security categories.
• Measure product efficacy over time and improve detection reliability.
• Assess security product output and perform root-cause analysis to identify gaps and false positives/false negatives.
• Write detailed technical reports documenting findings and recommendations; collaborate with teams.

🎯 Requirements

• Experience developing or improving vulnerability detection in web security.
• Knowledge of vulnerability management and linking research to product outcomes.
• Understanding of software composition analysis and software supply chain ecosystems.
• Experience with source code analysis, SAST/DAST, and benchmarking security tools.
• Knowledge of compilers and compiler design related to code analysis and detection.
• Experience building automated web security testing/analysis tools.

🎁 Benefits

• Benefits to support health, finances, and well-being.
• Flexible Paid Time Off.
• Equity compensation and Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental leave.
• Home office support.