Overview
Staff AI Product Security Architect at GitLab. This senior technical leadership role focuses on securing GitLab's AI-powered DevSecOps capabilities, including GitLab Duo Agent Platform, GitLab Duo Chat, and multi-agent collaboration systems. You will design robust security architectures that scale with the platform and establish secure-by-design principles for AI integrations.
What You'll Do
- Design and implement security architectures for AI integrations, including agent security, prompt injection prevention, and workflow validation
- Establish secure-by-design principles and patterns for AI systems that enable engineering teams to build secure capabilities efficiently
- Conduct comprehensive threat modeling and risk assessments for AI features and multi-agent orchestration platforms
- Develop security standards for AI model integration, data handling, and agent communication protocols
- Provide expert consultation to engineering teams on AI security architecture decisions and trade-offs
- Create architectural documentation and reference implementations that accelerate secure AI development
- Stay current with AI security threats, vulnerabilities, and industry best practices to inform architectural decisions
- Collaborate with Security Research to translate vulnerability findings into architectural improvements
- Partner with Product and Engineering leadership to balance security requirements with product velocity
- Mentor engineers and security team members on AI security architecture principles
- Work with legal and compliance teams to ensure AI systems meet regulatory requirements including EU AI Act, NIST AI RMF, and data privacy regulations
- Contribute to industry thought leadership through technical documentation, standards development, and community engagement
What You'll Bring
- 8+ years of experience in security architecture or application security, with significant experience securing AI/ML systems
- Deep understanding of AI system architectures and security vulnerabilities
- Proven expertise in threat modeling and security architecture for complex distributed systems
- Experience designing security controls for distributed applications and automated workflows
- Track record of developing security standards adopted across engineering organizations
- Strong knowledge of secure software development lifecycle practices and DevSecOps methodologies
- Ability to communicate complex security concepts to diverse technical and non-technical audiences
- Experience with AI frameworks, agent architectures, and orchestration platforms
- Demonstrated ability to balance security requirements with business objectives
- Robust collaborative skills with experience influencing technical decisions across organizations
Nice To Have Qualifications
- Experience with AI workflow validation, agent testing, and monitoring approaches
- Knowledge of AI regulatory compliance and governance frameworks
- Programming skills in Python with hands-on experience in AI frameworks
- Security certifications such as CISSP, CCSP, or similar
- Experience with GitLab or similar DevSecOps platforms
- Background in software engineering with expertise in distributed systems
- Published work or presentations on AI security architecture
About The Team
Security Architects are part of the Security Platforms and Architecture team, addressing complex security challenges to enable GitLab to be the most secure software factory platform. The team focuses on systemic product security risks and works cross-functionally to mitigate them while maintaining Engineering velocity.
How GitLab Will Support You
- Advantages to support your health, finances, and well-being
- All remote, asynchronous work environment
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation & Employee Stock Purchase Plan
- Growth and Development Fund
- Parental leave
- Home office support
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. If you're excited about this role, please apply and allow our recruiters to assess your application.
The base salary range for this role’s listed level is currently for residents of listed locations only. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
California/Colorado/Hawaii/New Jersey/New York/Washington/DC/Illinois/Minnesota pay range
$140,000—$300,000 USD
Country Hiring Guidelines: GitLab hires new team members in countries around the world. All roles are remote, however some roles may carry location-based eligibility requirements. Our Talent Acquisition team can help answer questions about location after starting the recruiting process.
Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. Our policies are based on merit and protect against discrimination. If you have a disability or special need, please let us know during the recruiting process.
Seniority level: Mid-Senior level
Employment type: Full-time
Job function: Information Technology
Industries: IT Services and IT Consulting and Software Development
#J-18808-Ljbffr