Top of page

Job intelligence

Intermediate Security Engineer, Security Incident Response Team (SIRT)

GitLab

Location: Australia Work arrangement: Region-restricted remote Employment: Full Time Posted: October 26, 2026 Freshness: Posted today Source check: Observed very recently
Disclosure3 of 5 core facts statedReview uncertainties
Last source observationObserved very recentlyObservation is not employer confirmation.
Application destinationjobicy.comReview the application route and source evidence in the full report below.

Before relying on the listing: Confirm Compensation and Application closing time with the employer or source. See verification questions

Executive opportunity brief

The decision in one screen

A compact evidence-first read of compensation, flexibility, mobility and what still needs verification. No universal quality score is used.

Compensation positionPay not disclosed
Work flexibilityRegion-restricted remoteBased only on stated location/work-arrangement evidence.
Decision evidence3 of 5 core facts knownThis listing states about the same number of core decision facts as the median role in the current sample.
Mobility evidenceSponsorship not establishedUnknown evidence is not treated as unavailable.
Current alternatives344 current same-family rolesCurrent HPJ inventory, not the whole labor market.
Negotiation readinessNegotiation evidence available: current same-currency market context.Use the private Offer & Negotiation Lab below if an offer arrives.

Fast read

Opportunity DNA

This opportunity needs a closer read before drawing a strong conclusion, especially around the pay picture is incomplete.

PayNot disclosed

A financial comparison will need the approved compensation range.

FlexibilityLocation limits visible

Geographic eligibility is restricted to a country or region.

Entry pathRequirements unclear

The listing does not make the minimum education or experience threshold clear enough yet.

MobilityNot established

Sponsorship and relocation support are not clear from the current listing.

ApplicationSome process detail

Part of the application route can be assessed, but the full external process may contain additional steps.

TraceabilityCurrent source traceable

At least one recent enabled source can still renew this vacancy.

This fingerprint summarizes what is clear, constrained or still unanswered in the current listing. It is a reading aid, not an overall job score.

Decision evidence check

3 of 5 core facts stated

This checks whether the listing states the facts that commonly change an employment decision. It measures disclosure completeness, not whether the opportunity is good or bad.

Facts already stated

  • Work arrangement
  • Location eligibility
  • Employment type

What to verify next

  • Compensation: What is the approved compensation range, and what portion is guaranteed base pay rather than variable compensation?
  • Application closing time: Is there a firm application deadline, a rolling review window or no stated closing date?

Unknown information is never converted into a negative score. The questions above exist to prevent missing evidence from being mistaken for a favorable term.

Decision levers

What could make or break the fit?

Reasons to look closer

Nothing stands out strongly enough yet to call a clear advantage. The role may still be attractive for reasons the listing does not spell out.

Trade-offs to weigh

  • The pay picture is incomplete: No usable salary range is stated, so a meaningful financial comparison is not possible yet.
  • Location rules could change the fit: Geographic eligibility is restricted to a country or region.

Questions worth asking before you invest more time

  • Ask for the approved compensation range before comparing this opportunity financially.
  • Confirm whether a degree is actually required, preferred, or replaceable with equivalent experience.
  • Confirm the actual minimum experience requirement rather than assuming preferred background is mandatory.
  • Ask whether visa sponsorship is available before investing significant time in the application.

These questions come from details the listing leaves open. An unanswered point is not treated as a disadvantage.

Opportunity neighborhood

Keep your options open

These live roles sit close enough to this opportunity to make useful comparison points. Look across several employers before deciding what pay, flexibility or access trade-offs you are willing to accept.

Staff Product Security Engineer (Security)

Phantom · Canada, UK, USA

USD 200,000–250,000 / year Region-restricted remote 4/5 core facts

Why it is nearby: Same seniority band · Similar work arrangement · Same employment type

Different angle: Different country

Platform Security Engineer (AMER/APAC)

Supabase · APAC, LATAM, Canada, USA

Salary not disclosed Region-restricted remote 3/5 core facts

Why it is nearby: Same seniority band · Similar work arrangement · Same employment type

Different angle: Different country

Staff Security Architect

Kraken · EMEA, LATAM, Canada, Europe

Salary not disclosed Region-restricted remote 3/5 core facts

Why it is nearby: Same seniority band · Similar work arrangement · Same employment type

Different angle: Different country

This neighborhood is drawn from current inventory in the same broad occupation. Similarity is based on explicit listing facts; missing details do not count against a job.

Role market context

How much current choice is visible around this kind of work?

This compares the vacancy with current High Paid Job inventory in the broad Cybersecurity roles family. It describes visible choice and disclosure, not future demand or career quality.

Current visible roles344

200 most recent current roles sampled for the disclosure measures below.

Employers represented146

Distinct employers in the bounded current sample, not an estimate of all employers hiring in the market.

Decision-ready disclosure18%

Current sampled roles stating at least four of the five Core Decision Facts.

Compensation stated38%

Requires a numeric amount, explicit ISO currency and supported pay period.

Work arrangement stated77%

Listings with explicit enough remote, hybrid or on-site evidence to classify.

Stated closing time29%

Missing deadline evidence remains unknown and is not interpreted as an open-ended application window.

Disclosure comparison: This listing states about the same number of core decision facts as the median role in the current sample. This listing: 3/5 · sample median: 3.0/5.

Currencies with explicit pay evidence in the sample: USD (62) · EUR (10) · GBP (4). Raw amounts across different currencies are not compared.

This describes current visible High Paid Job inventory in the same broad occupation family. Percentages use a bounded recent sample and are not a forecast, a complete labor-market census or an employer-quality measure.

Constraint opportunity lab

What changes the size of the current opportunity pool?

Each line applies one stricter evidence-based constraint to the same bounded current role-family sample. It helps you see the trade-off in visible choice without deciding which trade-off is right for you.

Require explicit sponsorship or relocation support 0 / 200 0%

Counts only affirmative or possible sponsorship evidence, or relocation explicitly offered. Unknown is not treated as no.

Stay in the same stated country 3 / 97 3%

Uses only roles where a country is known. Roles without country evidence are excluded from this denominator.

Require worldwide remote evidence 15 / 200 8%

A much stricter subset: only listings with explicit worldwide-remote evidence remain.

Require at least four Core Decision Facts 36 / 200 18%

Shows the subset with enough stated evidence for a more informed first comparison.

Require a remote-listed arrangement 65 / 200 33%

Counts roles explicitly classified as worldwide remote, region-restricted remote or remote with restrictions still unclear.

Require usable compensation disclosure 76 / 200 38%

Requires amount, explicit ISO currency and a supported pay period. Missing pay evidence remains unknown.

Stay around the same seniority band 173 / 200 87%

Includes roles whose seniority is genuinely unspecified rather than assuming they belong to another level.

Keep the same employment type 85 / 92 92%

Uses only roles with a stated employment type.

These are counterfactual filters over a bounded sample of current HPJ inventory in the same broad occupation family. They show how visible choice changes when one evidence-based constraint is applied; they do not tell you which constraint you should choose or predict hiring outcomes. The calculation uses the 200 most recent current roles from 344 visible roles in this broad family.

Salary transparency context

Is pay disclosure typical for this kind of role?

This listing does not state usable structured compensation. About 38% of the bounded current role sample does.

This listingUsable pay not stated

Compensation counts only when amount, ISO currency and supported pay period are all known.

Current same-role sample38%

Pay disclosure is limited in the current role sample.

Current employer pattern11%

This employer’s current visible listings disclose pay materially less often than the current same-role sample.

This compares salary-disclosure behavior in current visible listings. It does not compare raw salary amounts across currencies, infer undisclosed pay as zero, or rate employer quality.

Private offer & negotiation lab

Turn an offer into evidence, not guesswork

Enter an annual base offer and, if you want, your own target. HPJ compares only within one explicit currency and never chooses a target for you.

Advertised annualized payNot usable / not disclosedListing evidence only.
Current comparable medianUSD 147,50061 current sampled roles
Current upper quartileUSD 178,500Current HPJ inventory context, not a salary recommendation.

Negotiation evidence available: current same-currency market context.

Enter an annual base offer to compare it with explicit same-currency evidence. HPJ will not suggest a target for you.

Review the full package · 10 terms

Mark what is confirmed, what needs clarification and what you want to prioritize. These choices and notes stay in this browser.

Base payVerify

The approved base-pay range is not established in the listing.

Bonus / commissionVerify

Variable compensation is mentioned; verify amount, formula, target and eligibility.

Equity / long-term incentivesMentioned

Equity or long-term incentive language is mentioned; verify grant type, vesting and valuation basis.

Retirement / pensionVerify

Retirement or pension benefits are mentioned; verify employer contribution and vesting.

Health benefitsVerify

Health-benefit language is mentioned; verify coverage, dependants and employee cost.

Paid leaveMentioned

Paid-leave language is mentioned; verify the exact entitlement and carry-over rules.

Work arrangementKnown

A work-arrangement signal is available; verify schedule details before relying on it.

RelocationVerify

Relocation support not established

Visa / work authorizationVerify

Sponsorship not established

Review timingVerify

A review cycle is mentioned; verify timing and whether compensation can change at that review.

Questions worth taking into the offer conversation

  • What is the approved base-pay range for this role?
  • Is there a bonus, commission or other variable-pay component, and how is it calculated?
  • What retirement or pension contribution does the employer provide?
  • What health coverage is included and what costs remain with the employee?
  • If relocation is relevant, what expenses, timing and repayment conditions are covered?
  • What exact sponsorship or work-authorization conditions apply to this role?
  • When is the first performance and compensation review after joining?
  • What is the approved compensation range, and what portion is guaranteed base pay rather than variable compensation?

Occupation intelligence

What broader career references connect to this role?

HPJ uses broad comparison families for current-market analysis. External taxonomy results are reference candidates for that broad family, not a declaration that this vacancy has been authoritatively classified into a specific occupation.

HPJ comparison familyCybersecurity roles
Adjacent families worth exploringSoftware engineering roles · Data & AI roles

European occupation references

This service uses the ESCO classification of the European Commission.

U.S. occupation references

This site incorporates information from O*NET Web Services by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). O*NET® is a trademark of USDOL/ETA.

Career reference research

Skills worth investigating

Official occupational context, paired with exact phrases visible in this vacancy. It is not a skills test or an applicant-fit score.

ESCO · European occupation

cyber incident responder

Usually essential in this ESCO occupation
  • security engineering
  • ICT security legislation
  • ICT network security risks
  • attack vectors
  • risk management
  • building systems monitoring technology
  • communicate with stakeholders
Context-dependent ESCO skills
  • provide user documentation
  • cloud security and compliance
  • project management
  • ensure proper document management
  • cloud monitoring and reporting

O*NET · U.S. occupation

Information Security Analysts

O*NET occupation skills
  • Reading Comprehension
  • Critical Thinking
  • Active Listening
  • Complex Problem Solving
  • Speaking
  • Writing
  • Judgment and Decision Making
  • Monitoring
Build my private skill preparation brief Your evidence · Practice · Interview questions

Plan how you might demonstrate or investigate occupational skills. These are broad-family reference examples, not confirmed vacancy requirements. Nothing you enter is sent to High Paid Job.

security engineeringESCO · Essential · Listing mention unknown
ICT security legislationESCO · Essential · Listing mention unknown
ICT network security risksESCO · Essential · Listing mention unknown
attack vectorsESCO · Essential · Listing mention unknown
risk managementESCO · Essential · Listing mention unknown
building systems monitoring technologyESCO · Essential · Listing mention unknown
communicate with stakeholdersESCO · Essential · Listing mention unknown
provide user documentationESCO · Optional · Listing mention unknown
cloud security and complianceESCO · Optional · Listing mention unknown
project managementESCO · Optional · Listing mention unknown
ensure proper document managementESCO · Optional · Listing mention unknown
cloud monitoring and reportingESCO · Optional · Listing mention unknown
Reading ComprehensionO*NET · Skills · Listing mention unknown
Critical ThinkingO*NET · Skills · Listing mention unknown
Active ListeningO*NET · Skills · Listing mention unknown
Complex Problem SolvingO*NET · Skills · Listing mention unknown
SpeakingO*NET · Skills · Listing mention unknown
WritingO*NET · Skills · Listing mention unknown
Judgment and Decision MakingO*NET · Skills · Listing mention unknown
MonitoringO*NET · Skills · Listing mention unknown

Private to this browser. Up to 20 reference skills; not a qualification assessment or hiring prediction.

Useful next question: Which of these occupational reference skills does the hiring manager actually expect for this specific role, and what evidence would demonstrate them?

These skills belong to one reference occupation selected for HPJ’s broad career family, not a verified classification of this vacancy. Text overlap only means a phrase appears in the available listing text; it does not establish an employer requirement, your proficiency, or a qualification gap. A missing mention is unknown, not a deficit.

Adjacent current roles to investigate

Software engineering roles

Senior Software Engineer, Product

RevenueCat · EMEA, LATAM, Canada, USA

same seniority band · same employment type · similar work-arrangement evidence
Software engineering roles

Senior Backend Engineer

RevenueCat · EMEA, LATAM, Canada, USA

same seniority band · same employment type · similar work-arrangement evidence

Adjacent-family roles are exploration prompts from current HPJ inventory. They are not inferred qualification matches and they do not imply a promotion path.

Career move map

What sits one step away?

This listing is currently read as Senior / lead. Nearby roles one visible seniority step away can help you judge whether to widen the search, stretch upward or compare the responsibilities more carefully.

Broader-entry direction

Mid-career

Cyber Security Specialist

Softtest pays pty ltd · Remote — Worldwide

Similar work arrangement · Recently posted

Stretch direction

Leadership

Cybersecurity Engineer

dscout · USA

Similar work arrangement · Same employment type · Recently posted

These are live roles one visible seniority step away in the same broad occupation family. They can reveal nearby options, but they are not a guaranteed promotion path and do not account for your personal experience.

Skill bridge

What does this role connect to?

AWS is one of the signals this listing shares with skills appearing often across current Cybersecurity roles opportunities.

Skills named in this listing

AWSGoogle CloudPython

Shared with the current career sample

  • AWS Seen in 36 sampled listings
  • Google Cloud Seen in 22 sampled listings
  • Python Seen in 38 sampled listings

Combinations also appearing together

  • AWS + Python appeared together in 22 sampled listings
  • AWS + Google Cloud appeared together in 18 sampled listings

Application edge

  • If these skills match your background, prepare one concrete example that shows how you used AWS, Google Cloud, and Python rather than relying on a keyword-only claim.

If the named skills are genuinely transferable in your own experience, the occupation map also points to adjacent current families worth researching: Software engineering roles and Data & AI roles. This is exploration context, not a qualification match.

Skill signals come from explicit text mentions. A mention is not automatically a requirement, and absence from the current top-skill list does not make a skill rare or unimportant. The current career comparison draws on 83 sampled listings; 79 contain a recognized skill signal.

Application Decision Lab

Turn the listing into a preparation plan

Separate what the listing actually states from what you still need to prepare or verify. Your selections and short notes stay in this browser and are never submitted to High Paid Job.

Listing mention

AWS

This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.

Listing mention

Google Cloud

This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.

Listing mention

Python

This skill or technology is explicitly mentioned in the available listing text. A mention is not automatically a mandatory requirement; prepare a concrete example only if it is relevant to your experience.

Questions worth resolving before you rely on the opportunity

  • Compensation: What is the approved compensation range, and what portion is guaranteed base pay rather than variable compensation?
  • Application closing time: Is there a firm application deadline, a rolling review window or no stated closing date?
  • Work authorization / sponsorship: If sponsorship or work authorization matters to you, what exact immigration or employer-sponsorship conditions apply to this role?
  • Application process: What interview, assessment, portfolio, reference or screening stages are part of the hiring process?

Decision analysis

What the listing really tells you

Useful decision context

Intermediate Security Engineer, Security Incident Response Team (SIRT) at GitLab becomes easier to judge once remote flexibility can be weighed properly, the application route gives a few useful clues, and source continuity adds useful context are viewed together. Here is the current read from the information available.

Remote flexibility can be weighed properly

The work-location pattern is “Remote with some uncertainty or restrictions”, with Remote Freedom at 66/100. One practical limit to notice is geographic eligibility is restricted to a country or region..

The application route gives a few useful clues

Provider-mediated application path. The external application may contain additional steps that are not visible from the listing itself.

Source continuity adds useful context

1 recent enabled source can currently renew this vacancy across 1 source classes. That improves traceability, although it does not verify the employer itself.

How this analysis is assembled

The brief pulls together the parts of the vacancy that can be compared reliably today. Gaps in the listing remain visible instead of being filled with assumptions.

Analysis evidence coverage

How much analysis can the current evidence support?

50%Partial analysis evidence coverage
50%
Current-sample pay positionInsufficient comparable salary sample

Comparable salary data is not available for this job yet.

Remote Freedom evidence66 / 100

Measures observable location flexibility and explicit restrictions; it does not determine whether remote work is personally desirable.

Salary evidence qualityNo usable disclosed salary evidence

Missing compensation is not treated as negative evidence; this dimension simply remains unavailable.

Listing freshnessPosted today

The source posting date is today.

Source provenance evidenceEstablished source evidence

At least one enabled source recently observed the vacancy. The source chain is traceable, but this is not independent employer verification.

There is no universal opportunity score because pay, flexibility and access matter differently to different people. Compare Jobs lets you weight the evidence around your own priorities.

Decision checklist

What is supported, uncertain or worth checking?

This checklist separates supported strengths, visible cautions and missing evidence. It is not an overall recommendation or guarantee that the job is suitable for you.

Supported strengths

No standout strength is supported strongly enough to list here. That is not a negative rating.

Visible cautions

  • Geographic eligibility is restricted to a country or region.
  • This is remote work with a geographic restriction, not a worldwide-remote vacancy.

Still unknown

  • There is not enough comparable salary evidence to establish this job’s current pay position.
  • Visa sponsorship is not established by the available listing data.

Qualifications & access

What qualifications are explicitly stated?

Entry-barrier evidence limited

EducationEducation requirement not established
Required experience evidenceExperience requirement not established
Explicit required barriers0
Explicit access signals0

Qualification signals come from explicit listing wording. Anything not mentioned remains unknown, so silence is never treated as proof that a degree, experience, licence or other requirement is unnecessary.

Pay vs. barriers

Opportunity Efficiency not assessed

The current pay position is not reliable enough to weigh compensation against the stated barriers.

Location-freedom constraints

1 explicit Remote Freedom restriction signal is present and is shown separately from qualification requirements.

Evidence gaps that could change this interpretation
  • Current comparable pay position is unavailable.
  • Education requirement is not established.
  • Required prior-experience level is not established.

This section weighs pay context against clearly stated barriers without collapsing unlike requirements into one universal score. Degree, experience, licensing, clearance and location limits remain separate, and missing qualification details stay unknown.

Beyond the headline

Not enough evidence for a hidden-value finding

Potential hidden value appears only when several distinct non-pay advantages are actually supported. Missing requirements or benefits are never counted as positives.

Still check: The current application path is provider-mediated rather than directly classified as an employer-authorized or official route.

Hidden Value is an experimental evidence summary, not an investment-style score or guarantee of employability. It only uses explicit current listing evidence and does not infer that an unmentioned qualification is unnecessary.

Compensation intelligence

How competitive is this pay?

No High Pay Score yet

Comparable salary data is not available for this job yet.

Why this analysis?

  • Comparable salary data is not available for this job yet.
  • Salary confidence: Not available. No disclosed salary can currently be normalized for comparison. Missing compensation is not treated as low-quality salary evidence.
  • Range quality: No disclosed range.

Employer compensation communication

Pay transparency at GitLab

Limited current pay transparency

This score uses the employer’s current visible listings and combines how often pay is disclosed with how useful those ranges are. Bonus, equity and benefit mentions are shown separately and do not raise the score.

23/100
23%
Salary disclosure11% · 13 of 118 sampled listings
Range qualityMixed range quality
Bonus wording1 current listings
Equity wording63 current listings
Benefits wording65 current listings
Evidence strengthStronger

This pattern comes from the employer’s current visible vacancies. It describes hiring and pay transparency in those listings, not employee satisfaction or a permanent judgement of the employer.

Current employer intelligence

GitLab — current opportunity snapshot

Current opportunities visible118
Salary disclosure11%
Remote-policy evidence coverage64% · 76 of 118 sampled listings
Remote share of known arrangements100%
Worldwide-remote share18%
Known hiring countries13
Sponsorship evidence coverage0% · 0 of 118 sampled listings
Explicit sponsorship outcomes0 confirmed · 0 possible · 0 unavailable
Pattern sample118 of 118 · 100% coverage
Current role-family breadth8
Stated closing-date coverage12%
Relocation evidence coverage0% · 0 explicitly offered
Posted within 7 days38% of listings with a known posting date

Employer Evidence Profile

How often this employer’s current visible sampled vacancies state decision-critical information. These percentages describe evidence coverage, not employer quality.

Compensation11% of sampled current listings

Current sampled listings with advertised compensation evidence.

Work arrangement64% of sampled current listings

Current sampled listings whose work arrangement is clearer than unknown.

Location47% of sampled current listings

Current sampled listings with a supported country signal.

Application timing12% of sampled current listings

Current sampled listings with an explicit closing time.

Posting date100% of sampled current listings

Current sampled listings with a usable posting date.

Sponsorship0% of sampled current listings

Current sampled listings that explicitly indicate confirmed, possible or unavailable sponsorship evidence.

Relocation0% of sampled current listings

Current sampled listings with an explicit relocation signal.

Low coverage means the current visible listings state the information less often. It does not prove that the employer lacks the policy, benefit or support.

Common current occupation families: Sales (35) · Software engineering (28) · Customer success (8)

Visible seniority mix: Early-career (1) · Mid-career (9) · Senior / lead (39) · Leadership (35)

Current employment-type mix: Full time (66) · Contract (1)

Most visible hiring countries in this sample: United Kingdom (19) · Singapore (6) · United States (6) · Japan (5)

Other current roles from this employer

These are other current vacancies visible from the same employer, not endorsements or evidence of future hiring plans.

Current disclosed salary medians by currency

  • USD 187,200 median · 11 disclosed salaries

Questions worth asking this employer

  • What compensation range applies to this role, and which parts of total compensation are fixed versus variable?
  • If work authorization matters to you, what sponsorship policy applies to this specific role and location?
  • If a move is required, is relocation assistance available for this position?
  • What is the expected application and interview timeline if the listing does not state a closing date?

These questions are prompted by missing or thin evidence in the employer’s current visible vacancies. Missing evidence is not treated as a negative judgement.

This employer snapshot uses the employer’s current visible listings. Remote and sponsorship rates use only vacancies with explicit evidence, while missing information stays unknown. Salary medians are shown separately by currency and need at least five disclosed salaries. Zero confirmed sponsorship means none was explicitly found in this sample, not that sponsorship is unavailable.

This snapshot describes the employer’s current visible vacancies—things such as pay disclosure and work arrangement. It is not an employee-satisfaction or hiring-quality rating, and different currencies stay separate.

Work-location intelligence

Remote Freedom

66/100

Remote with some uncertainty or restrictions

66%

Why this score?

  • The role is remote but the source identifies a country or regional restriction.

Location restrictions detected

  • Geographic eligibility is restricted to a country or region.

Flexibility signals detected

  • The description reinforces broad location independence.

Remote Freedom measures observable location flexibility only. Unknown work-location information remains unscored. Timezone wording is penalized only when it appears restrictive; general collaboration across time zones is not treated as a restriction. A score does not guarantee legal work eligibility, payroll availability or visa sponsorship.

International applicant intelligence

Visa & relocation signals

Sponsorship status is shown only when the listing provides clear enough wording. Employer history or headquarters location is not used to guess an answer.

Visa sponsorshipSponsorship not established

The available listing details do not contain a clear enough sponsorship statement.

RelocationRelocation support not established

The available listing details do not contain a clear enough relocation statement.

Tradeoff check

What’s the catch?

These are visible conditions worth checking before treating the headline compensation as the whole story:

  • This is remote work with a geographic restriction, not a worldwide-remote vacancy.

Application-path intelligence

What can we see about the application process?

Provider-mediated application path

The current application path comes through a publisher or aggregator. The destination may still lead to an employer-authorized hiring system, but that is not clear enough to assume.

Current destination: jobicy.com · HTTPS

No additional required application step is clear in the available listing text. This does not mean the external application is one-click or friction-free.

Application effort is estimated from visible listing and source details. Optional steps are kept separate from mandatory ones, and the external form may contain additional requirements that are not visible here.

Application safety context

Application safety check

Basic application-safety context available

The current application destination has a basic transport-safety signal such as HTTPS. This does not verify the employer, vacancy, recruiter or application process.

Evidence checked: Source provenance · Application destination · Listing wording

Observable transport-safety signals

  • The available application destination uses HTTPS.
Before you share money or sensitive information
  • Confirm the vacancy on the employer’s official careers site when practical, especially if a recruiter contacts you outside the listed application path.
  • Check that recruiter email domains and application destinations are consistent with the employer or an identifiable recruiting provider.
  • Do not pay application, processing, training or equipment fees merely to be considered for a job.
  • Do not send cryptocurrency, gift cards, online-banking credentials or PINs as part of an application.
  • Treat unusually fast offers or interviews conducted only through informal messaging channels as reasons to verify the employer independently.

This is a limited safety screen, not employer verification and not a fraud determination. Never send money, cryptocurrency, passwords or sensitive banking credentials merely because a listing appears on a job platform.

Original listing details

The section below comes from the listing source. The decision sections above use the job’s structured pay, location, qualification, mobility and application details to give you additional context.

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.

The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software.

*Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.

An overview of this role

As an Intermediate Security Engineer on GitLab's Security Incident Response Team (SIRT), you will be on the frontline of protecting both GitLab.com and GitLab the company from security threats. This role operates on a compressed 4-day work schedule, with a full-time week's hours condensed into four longer working days. Shifts run Sunday through Wednesday to provide 24/7/365 security coverage.

Your primary focus will be detecting and responding to security incidents during your scheduled shifts. You'll work extensively with our incident response automation tools to investigate, analyze, and resolve security events. You'll also have opportunities to contribute to our security tooling and automation, helping to improve our detection and response capabilities.

In this role, you'll develop expertise using our security infrastructure to monitor for threats, analyze potential incidents, and coordinate response efforts across teams. This position is ideal for someone who wants to grow their incident response skills while working within GitLab's established security framework. You'll learn to think both tactically and strategically about security, while getting hands-on experience handling real-world incidents.

Successful Security Engineers thrive in high-pressure environments, remaining calm while following prepared runbooks and thinking critically about security challenges. In this role, you will learn to think like both an attacker and defender, developing proactive and preventative security measures to keep GitLab and its users' data safe in our ever-changing threat landscape. Through hands-on experience and mentorship, you'll develop the skills needed to anticipate security risks, respond effectively to incidents, and contribute to GitLab's robust security posture.

Find out more about the Security Operations team and responsibilities here:

What you’ll do

  • Lead security incident response in our 24/7 global rotation, managing incidents from detection through containment and recovery
  • Create and maintain comprehensive incident response documentation, including runbooks and standard procedures
  • Conduct post-incident analysis through RCA and lessons-learned reviews to strengthen our incident response program
  • Design and implement automated security processes to improve operational efficiency and reduce manual intervention
  • Drive continuous improvement by identifying security gaps and implementing advanced detection and response capabilities
  • Collaborate across GitLab teams to develop new security capabilities and deliver technical projects that enhance our infrastructure

What you’ll bring

  • Demonstrated ability to learn and lead incident response processes independently
  • Experience with SIEM/security logging tools
  • Experience with cloud platforms (GCP and/or AWS)
  • Python programming skills or strong willingness to learn
  • A passion for technical documentation
  • Proactive approach to identifying and investigating security threats
  • Interest in conducting forensic analysis of infected hosts
  • Experience or strong desire to learn cloud-based security investigations

About the team

Security Operations is a globally distributed team of engineers split across 3 core regions; AMER, APAC and EMEA, and is at the forefront of security events that impact both GitLab.com and GitLab. We are both reactive and proactive, leading security investigations, incident response support and response resolution, through to cyber threat analysis and detection and response engineering. Even though we’re a global team, we work together in a cross-regional manner and have automation and processes to facilitate collaboration when resolving incidents, handovers, and general collaboration for project work as well.

How GitLab Supports Full-Time Employees

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.

Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.

Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.

GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.

Listing provenance

Where did this job come from?

See where this vacancy came from and whether more than one current source can still support it. Source names help with traceability and attribution; they are not endorsements or guarantees.

Current source evidenceEstablished source evidence

At least one enabled source recently observed the vacancy. The source chain is traceable, but this is not independent employer verification.

Continuity
One recent renewable source
Source-class independence
One renewable source class
Last source observation
Observed very recently

This records when High Paid Job last observed the vacancy in source evidence. It confirms source presence, not that the employer edited the vacancy at that time.

  • 1 enabled source recently observed this vacancy.

Source confidence is about traceability and continuity. It is separate from application safety and should not be read as an employer reputation rating.

JobicyPublisher source

The vacancy is supplied by an external job publisher. Source information helps show where the listing came from; it is not a guarantee about the employer or vacancy.

Continue to applicationOpens in a new tab

Listing source: Jobicy. Destination: jobicy.com. The application opens in a new tab so you can keep this report open.