Intermediate Vulnerability Researcher

About the Role

Join GitLab's Vulnerability Research team to enhance our Application Security Testing offerings, making software more secure by researching and improving vulnerability detection capabilities.

Responsibilities

• Conduct vulnerability research and develop proof-of-concept exploits.
• Curate and manage advisory databases for dependency scanning.
• Build and maintain benchmarks to test the efficacy of security scanning products.
• Analyze security product output to identify and address gaps, false positives, and false negatives.
• Write detailed technical reports documenting research findings and recommendations.
• Collaborate with Security, Development, and Product teams to integrate research insights.

Requirements

• Experience developing or improving vulnerability detection capabilities in web security or a related area.
• Knowledge of the vulnerability management process and its connection to product outcomes.
• Understanding of software composition analysis and software supply chain ecosystems.
• Experience with source code analysis, SAST, DAST, and security tool benchmarking.
• Familiarity with compilers and compiler design for code analysis.
• Experience building automated web security testing or analysis tools.
• Ability to contribute effectively in a product development environment and collaborate cross-functionally.

Nice-to-Haves

• Interest in security and open-source contributions.
• Transferable experience from adjacent research, application security, or detection-focused roles.