Top Cybersecurity Jobs in London

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Lead end-to-end incident response for high-severity security events across cloud environments, perform DFIR investigations, build detection and automation (including AI-assisted) workflows, partner cross-functionally, produce executive communications and RCAs, maintain runbooks/playbooks, and mentor other engineers within a 24/7 global on-call model.

The Staff Infrastructure Security Engineer will lead security initiatives, set architectural patterns, conduct security reviews, and mentor engineers while ensuring security in cloud infrastructures for GitLab.

Lead and grow a distributed engineering organization building customer-facing security capabilities: proprietary scanners, AI/ML detection engines, agentic remediation, vulnerability management, and security foundations. Set vision and roadmap, drive architecture and delivery, partner with product management, establish engineering standards, and represent the group in cross-functional and customer forums.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.