Senior Threat Intelligence Engineer

GitLab

14h•$139,200 - $196,000•Remote

About The Position

GitLab is seeking a seasoned Threat Intelligence Engineer to join as a dedicated Senior Security Engineer, TI. This role is part of a program established a couple of years ago with a solid foundation in place, including reporting templates, tooling, feeds, and industry connections. The mission is to provide actionable intelligence to enable informed, proactive security decisions, anticipating threats before they materialize. The engineer will leverage strong hands-on technical skills to monitor the unique threat landscape, focusing on credible threats to GitLab and the software supply chain. Python expertise will be used as a force multiplier for automation and AI, and to maintain the Threat Intelligence Platform. Building relationships with industry peers for intelligence sharing and industry contribution is also key. This role will be the sole dedicated member, responsible for refining processes and iterating towards a more mature threat intelligence program. Support will be provided by Security Operations engineers, and collaboration across security, infrastructure, and product teams is encouraged.

Requirements

Proven track record of delivering actionable intelligence that has had a meaningful impact on the security of an organization.
Experience working with a Threat Intelligence Platform (TIP) and managing ingested and exported threat feeds.
Experience researching adversaries using OSINT and structured analytical techniques.
Ability to automate tasks by writing basic scripts/programs, preferably with Python.
Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.

Nice To Haves

Experience reverse engineering malware, particularly macOS and Linux malware and malware delivered via code repositories.
Public examples of blogs or open-source work related to threat intelligence.

Responsibilities

Monitor the threat landscape, identifying and analyzing the risks most relevant to GitLab and raising awareness through ad-hoc Flash Reports.
Administer the Threat Intelligence Platform and continue building out the open source, proprietary and internal intelligence collection pipeline.
Support incident response through malware analysis and threat actor tracking.
Collaborate on Purple Team Flash Operations, where emerging threats are turned into collaborative exercises to validate and improve defensive capabilities.
Build meaningful relationships with industry peers, sharing intelligence and collaborating on emerging threats.
Write code, leverage AI, and build automation to improve process efficiencies on the team.