Staff Backend Engineer, AST: Composition Analysis

4 hours, 1 minute ago
GitLab

GitLab

GitLab: The comprehensive DevOps platform revolutionizing software development with automation, AI workflows, and essential tools for efficient collaboration.

Internet Software & Services
1K-5K
Founded 2014

Description

  • Implement complex features in dependency scanning and container scanning to increase scan coverage, improve accuracy, and drive adoption of GitLab's SCA capabilities
  • Introduce new data points and detection techniques (e.g., reachability analysis, supply chain poisoning detection) to help customers understand issue urgency
  • Design and build scalable data correlation and collection solutions to operate at massive scale
  • Guide architectural and implementation decisions in collaboration with engineering managers, product managers, and peer staff engineers to improve scalability, reliability, and delivery outcomes
  • Contribute code, perform design reviews, and provide technical mentorship to raise quality standards and improve maintainability across the codebase
  • Collaborate across GitLab’s security domain (including vulnerability management and adjacent teams) to align SCA work with related efforts and accelerate shared roadmap goals
  • Identify and prioritize technical debt remediation that improves team velocity, code health, and long-term maintainability
  • Translate product needs and customer feedback into technical solutions in partnership with product and security stakeholders
  • Establish reusable patterns and practices that improve delivery time and effectiveness for a distributed, multi-time-zone team

Requirements

  • Hands-on experience in Software Composition Analysis with the ability to contribute to dependency scanning and container scanning features
  • Deep, practical expertise building and evolving dependency scanning and container scanning capabilities
  • Proven ability to design solutions that balance complexity, performance, and maintainability
  • Expertise with backend technologies, particularly Go and/or Ruby on Rails, with ability to learn new technologies quickly
  • Experience evaluating technical tradeoffs in SCA and security tooling and delivering maintainable solutions that help customers manage supply chain risk
  • Ability to work effectively in distributed, async-first teams across multiple time zones
  • Experience explaining complex technical and security concepts to engineers and stakeholders
  • Track record of solving novel technical problems, establishing reusable engineering patterns, and mentoring peers
  • Familiarity with large-scale data correlation, collection techniques, and detection approaches (e.g., reachability analysis, supply chain poisoning) preferred

Benefits

  • United States base salary range $131,600 — $282,000 USD (base only; excludes bonuses, equity, and benefits)
  • Benefits to support health, finances, and well-being
  • Flexible Paid Time Off
  • Equity compensation and Employee Stock Purchase Plan
  • Growth and Development Fund for learning and development
  • Parental leave
  • Home office support
  • Remote-first, distributed work environment with Team Member Resource Groups

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Python Developer (Bangalore, India Based)

Zimperium 251-1K Professional Services

Zimperium is hiring a Senior Python Developer in Bangalore to build and support scalable web and task-server infrastructure for its mobile security platform.

Agile AWS Azure CI/CD Django Docker FastAPI Flask GCP Generative AI Git Hugging Face Kubernetes LLM Microservices MLOps MongoDB MySQL PostgreSQL Python PyTorch REST API Scrum TensorFlow
3 hours, 8 minutes ago

[Job - 28321] Sênior Developer Golang, Brazil

CI&T 5K-10K Internet Software & Services

CI&T is hiring a Senior Golang Developer in Brazil to build and maintain scalable cloud applications for client projects, with a strong focus on technical ownership, collaboration, and continuous delivery.

Agile AWS CI/CD DDD Docker EC2 Git GitHub GitHub Actions Go Kafka Kubernetes Microservices OWASP REST API Solid.js Spring Boot SQL Terraform
3 hours, 8 minutes ago

Senior Software Engineer - Runtime

Sysdig 251-1K IT Services

Senior Software Engineer at Sysdig, working remotely on backend runtime security services that scale cloud threat detection, policy enforcement, and alerting across multi-cloud environments.

AWS C++ Docker Elasticsearch GCP GitHub Go Java Jenkins Kafka Kubernetes Linux Microservices NATS PostgreSQL Python Redis SQL
3 hours, 8 minutes ago

Senior Software Engineer - Runtime

Sysdig 251-1K IT Services

Sysdig is hiring a Senior Software Engineer to help scale its cloud security runtime platform by building backend services that power threat detection, policy enforcement, and alerting in multi-cloud environments.

AWS C++ Docker Elasticsearch GCP GitHub Go Java Jenkins Kafka Kubernetes Linux NATS PostgreSQL Python Redis SQL System Design
3 hours, 9 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers