Senior Manager, Product Security Engineering (Security Posture and Supply Chain)

Skills

What you'll do

• Lead comprehensive, governed rollouts of GitLab's own security capabilities across the estate, bringing every project into alignment with our Project Security Configuration Standard and keeping it there.
• Set a security baseline that accelerates engineering rather than gating it, so teams inherit secure defaults and paved paths instead of negotiating requirements project by project.
• Serve as Customer Zero for GitLab's security features: capture where adoption at scale is hard, and feed that evidence to Product and Engineering as a leading indicator of customer sentiment and a driver of roadmap decisions.
• Establish proactive software supply chain security as a first-class capability in Product Security, including third party component governance, trusted dependency controls, and the requirements behind product-level SBOMs.
• Reduce systemic risk across our own groups and namespaces, including lateral movement and token governance.
• Own the operations of the Product Security Risk Register and the metrics and dashboards that give the department a single, data-driven view of our posture.