VP of Product Security

GitLab

1d•$297,600 - $360,000•Remote

About The Position

GitLab is seeking a Vice President of Product Security to define how security is integrated into their AI-powered DevSecOps platform. This role reports to the Chief Information Security Officer and leads the Product Security organization with end-to-end responsibility for product and service security, focusing on secure product design and delivery, as well as the supporting infrastructure and cloud systems. This is a product engineering leadership role requiring experience in high-growth AI or SaaS companies, understanding the pace of product teams, and making security a native property of the product. The successful candidate will own product architecture, developer experience, and security outcomes. The role involves partnering with senior leaders across Engineering, Product, AI, and Security to shape outcomes like stronger security architecture, scalable security services, and predictable security processes that support fast product delivery. Examples of projects include building core security platform capabilities like authentication and authorization services, secrets management, permission models, and audit instrumentation, as well as defining security strategy for AI-powered features, including prompt injection defenses, model and data protections, and governance.

Requirements

Experience operating as a senior engineering or security leader with strong product engineering credibility and ownership of security-relevant product architecture
Experience building, shipping, and operating services in a high-growth SaaS or AI environment, with a clear understanding of how fast-moving product teams work
Ability to lead multi-disciplinary organizations through Directors, Senior Managers, and senior individual contributors in a distributed, remote-first setting
Knowledge of secure design, threat modeling, web application and API security, and modern authentication and authorization patterns
Familiarity with software supply chain security, continuous integration and continuous delivery pipelines, vulnerability management, incident response, and cloud security concepts
Experience partnering closely with Product, Engineering, AI, and Security leaders to turn risk, customer needs, and technical trade-offs into practical roadmaps and decisions
Skill in written and verbal communication, including presenting technical risk and business trade-offs clearly to executives, customers, and other stakeholders
Openness to candidates with different career paths, including product engineering leaders with deep security ownership or security leaders with a strong record of building and shipping products
Must be a United States Citizen

Nice To Haves

Experience with developer tools, DevOps/DevSecOps platforms, large-scale open-source projects, security standards and frameworks (OWASP, NIST, SLSA), bug bounty and coordinated disclosure programs, or regulated/security-sensitive customer environments (financial services, government, healthcare).

Responsibilities

Set the long-term strategy and operating model for Product Security across GitLab.com, GitLab Dedicated, and self-managed offerings
Lead a global, multi-disciplinary organization spanning Application Security, Product Security Engineering / security tooling, Security Architecture and Platforms, Vulnerability Management, Product Security Incident Response (PSIRT), and Infrastructure, Cloud, and Data Security
Partner with the Chief Technology Officer, Chief Product Officer, Chief Information Security Officer, Vice President of AI Engineering, and other R&D leaders to embed security into product architecture, planning, and delivery
Own the roadmap for core security services and developer-facing platform capabilities, including authentication, authorization, secrets management, auditability, and security APIs
Drive secure design reviews, threat modeling, and risk-based security practices that help product teams ship securely without adding unnecessary friction
Guide GitLab's approach to AI and agentic security, including security architecture, governance decisions, and risk acceptance for new AI surfaces
Oversee vulnerability management, product security incident response, and bug bounty operations, using trends and root-cause analysis to inform durable product and process improvements
Establish clear security metrics, planning inputs, and risk visibility that support executive decision-making, customer conversations, and engineering prioritization