Senior Security Engineer, Incident Response Team (Australia)

Overview

Senior Security Engineer for GitLab’s Security Incident Response Team (SIRT), supporting the protection of GitLab.com and GitLab from security threats.

What you'll do

• Lead and coordinate end-to-end incident response for high-severity security events.
• Investigate complex security incidents across cloud environments using DFIR methodologies.
• Partner with Detection Engineering to design and implement detection capabilities (SIEM use cases, alerting, telemetry pipelines).
• Build and enhance automation and AI-assisted workflows to improve triage, investigation speed, and response consistency.
• Partner with Threat Intelligence to contextualize threats and improve detection coverage.
• Conduct root cause analysis and lead post-incident reviews to drive continuous improvement and risk reduction.

What you'll need

• Strong experience in security incident response and investigations in cloud-first environments.
• Experience using or administering Git/GitLab in a security or engineering context.
• Hands-on experience with SIEM, EDR, and/or detection engineering.
• Experience with cloud platforms (AWS and GCP).
• Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK).
• Experience building or working with automation (e.g., Python, scripting, SOAR platforms).
• Excellent written communication skills with clear, actionable documentation.

Details

• Work in a 24/7 global environment using a follow-the-sun model; this role covers the APAC window and participates in a rotating on-call schedule.
• Location: Remote, Australia.