Skip to main content

Senior Manager, Product Security Engineering (Security Posture & Supply Chain)

GitLab
Remote - Canada, Israel, UK, USUpdated 1d ago
Base salary
$168k–$245k
Published base salary range
Location
Remote - Canada, Israel, UK, US
Remote eligibility
Employment
Full-time
Lead / Manager
Role family
Security
Developer tools
Role skills
Apply on job-boards.greenhouse.io
Job actionsApply now
Job actionsApply now

About the job

GitLab is the intelligent orchestration platform for DevSecOps, trusted by more than 50 million registered users and over 50% of the Fortune 100. As Senior Manager of the Security Posture Management (SPM) team within the Product Security Department, you will lead the team that secures GitLab's own software factory, applying GitLab's security capabilities across the estate and building proactive software supply chain security.

What You'll Do

  • Lead comprehensive, governed rollouts of GitLab's security capabilities across the estate, aligning projects with the Project Security Configuration Standard.
  • Serve as Customer Zero for GitLab's security features, feeding adoption friction back to Product and Engineering.
  • Establish proactive software supply chain security, including third-party component governance, trusted dependency controls, and product-level SBOM requirements.
  • Reduce systemic risk across groups and namespaces, including lateral movement and token governance.
  • Own the Product Security Risk Register and metrics/dashboards for a data-driven view of posture.
  • Partner with Compliance to produce evidence for audits, certifications, and security maturity assessments.
  • Represent the work externally and lead, coach, and grow the team.

What You'll Bring

  • Experience managing a security or engineering team, including hiring, performance, and career development.
  • Technical fluency across security posture management, software supply chain security, and secure configuration of a large SaaS estate.
  • Track record of driving broad, governed rollouts of security capability across an engineering organization.
  • Experience translating security requirements into controls and producing control evidence for audit or certification.
  • Ability to drive measurable impact under high ambiguity and break large problems into iterative wins.
  • Strong written communication for an all-remote, async environment.

Compensation

Base salary range for US residents: $168,000—$245,000 USD. Grade and salary determined through interviews and review of education, experience, knowledge, skills, abilities, equity, market data, and geographic location.

Benefits

  • Flexible Paid Time Off
  • Equity Compensation & Employee Stock Purchase Plan
  • Growth and Development Fund
  • Parental Leave

How to Apply

Apply through the provided link.

Skills & tags

What you can verify before applying

Compare the essentials before you leave: pay, remote scope, employment type, source, and the employer apply destination.