Senior Manager, Product Security Engineering (Security Posture and Supply Chain) at gitlab

Senior Manager, Product Security Engineering (Security Posture and Supply Chain)

gitlab · RemoteRemotosenior

En corto

▸Liderazgo de un equipo que asegura la fábrica de software de GitLab, aplicando sus propios productos en producción.
▸Enfoque en postura de seguridad y cadena de suministro, con impacto directo en productos y roadmap.
▸Este rol actúa como 'Cliente Cero' para las herramientas de seguridad de GitLab, contribuyendo al desarrollo del producto.

Proficiency in written and spoken English is required.

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

¿Qué piden?

✓Liderazgo de equipos de ingeniería de seguridad en entornos de alta escalabilidad.
✓Experiencia en implementación de seguridad de postura y cadena de suministro en software interno (Customer Zero).
✓Capacidad para establecer estándares de seguridad con defaults seguros que aceleren la ingeniería.
✓Habilidades sólidas en gestión de riesgos, métricas y herramientas de registro de riesgos.
✓Experiencia colaborando con Compliance para auditorías y certificaciones.
✓Experiencia en el uso de SBOMs, gestión de componentes de terceros y control de dependencias.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

GitLabSecurity Posture Management (SProject Security ConfigurationSupply Chain SecurityThird-party component governanTrusted dependency controlsSoftware Bill of Materials (SBRisk RegisterMetrics and DashboardsCompliance & Auditing

¿A quién escribirle en gitlab?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As the Senior Manager of the Security Posture Management (SPM) team within the Product Security Department , you lead the team that secures GitLab's own software factory: the estate we build and ship from. Your team drives comprehensive, governed rollouts of GitLab's security capabilities across every project, applying our own product the way our customers do, and builds proactive software supply chain security as a first-class capability within Product Security. This is Customer Zero work with real reach. Where the team hits friction adopting our own features at scale, that signal goes straight to Product and Engineering as an early read on what customers will experience. Where it succeeds, it becomes the story of how GitLab secures its own software factory, told publicly and used by our go-to-market teams. You will own the direction, delivery, and growth of this team. You set priorities toward the highest-leverage work, build the team out while it is still forming, and create the conditions for engineers to do their best work. What You’ll Do • Lead comprehensive, governed rollouts of GitLab's own security capabilities across the estate, bringing every project into alignment with our Project Security Configuration Standard and keeping it there. • Set a security baseline that accelerates engineering rather than gating it, so teams inherit secure defaults and paved paths instead of negotiating requirements project by project. • Serve as Customer Zero for GitLab's security features: capture where adoption at scale is hard, and feed that evidence to Product and Engineering as a leading indicator of customer sentiment and a driver of roadmap decisions. • Establish proactive software supply chain security as a first-class capability in Product Security, including third party component governance, trusted dependency controls, and the requirements behind product-level SBOMs. • Reduce systemic risk across our own groups and namespaces, including lateral movement and token governance. • Own the operations of the Product Security Risk Register and the metrics and dashboards that give the department a single, data-driven view of our posture. • Partner with Compliance to produce evidence of our security control implementation for audits, certifications, an

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.