Skip to Content

Intermediate Backend Engineer , Security Factory

Job Overview

As an Intermediate Backend Engineer on GitLab's Security Factory: Code Scanning team, you'll help developers find and fix security issues in their code by contributing to the static analysis engine that finds them.

Key points

  1. Extend the program model, including parsing, symbol resolution, intermediate representations, call graphs, and taint and data-flow analysis, to support new languages and frameworks.

  2. Build and apply AI-assisted tooling to implement, review, and validate engine changes and findings, in collaboration with the team's technical leadership. Measure detection quality…

  3. Develop static application security testing (SAST) rules mapped to Common Weakness Enumeration (CWE) and the Open Worldwide Application Security Project (OWASP)…

  4. Implement component specifications with engineers and AI agents through phased plans and small, reviewable changes. Keep specifications and code in sync.

  5. Experience using AI or large language model (LLM) tools to generate or evaluate technical content…

  6. Solid professional experience writing and testing production code in a systems language, particularly Rust or Go. Our engine is written in Rust…

  7. An interest in static analysis and application security, including parsing, intermediate representations, taint and data-flow analysis…

  8. Organize and progress your work independently in a remote, largely asynchronous environment.

Skills

GitRecruitingCI/CDLLMsDockerCampaign ManagementTroubleshooting

Similar jobs

More open roles like this one