Principal Security Awareness & Human Risk Engineer

Overview

Principal Security Awareness & Human Risk Engineer is a strategic individual contributor role in GitLab’s Security Assurance team, responsible for GitLab’s global security awareness and education program and measurable reduction in human-related security risk.

What you'll do

• Own and evolve the global security awareness and education program across multiple content types.
• Run the phishing simulation program end to end, including design, deployment, analysis, and follow-up.
• Apply behavior change principles to reinforce secure habits and address priority risk behaviors.
• Build security culture through learning campaigns, Security Awareness Month, and ongoing engagement.
• Produce multimedia awareness and education content, including video.
• Administer training and phishing platforms, owning program data and reporting end to end.
• Define and report performance indicators to Security Assurance leadership.

What you'll need

• Minimum 10 years’ experience building or scaling global awareness and human-risk programs with measurable outcomes.
• SANS Security Awareness Professional (SSAP) certification or equivalent expertise.
• Experience running enterprise-scale phishing programs and organization-wide awareness campaigns.
• Experience evaluating, selecting, consolidating, or replacing security training vendors, including cost/value analysis.
• Instructional design capability.
• Working knowledge of security policy development, audit support, and control evidence.

Details

• Remote roles with hiring locations listed for Canada, United Kingdom, and United States.
• Base salary range in the United States: 203,200–275,000 USD (excludes bonuses, equity, or benefits).