Backend Engineer, Secure: Dynamic Analysis

An overview of this role

As a Backend Engineer in our Dynamic Analysis group you'll play a key role in maturing our DAST and API Security offerings. Your work will help customers identify critical threats such as cross-site scripting SQL injection and cross-site request forgery enabling development and security teams to collaborate more efficiently as they discover security risks which could be exploited in the applications they create.

Some examples of our projects:

• Dynamic Application Security Testing

• API Security

What You’ll Do

• Play a key role in improving the maturity of our browser-based DAST and API Security tools.

• Work across a range of languages and frameworks including C# Go Python and others as needed.

• Solve interesting technical problems with your team such as building API discovery features using a blend of AI and static analysis improving our high performance web application spider or writing rules to detect latent security risks.

What You’ll Bring

• Significant professional experience with C#.

• Desire to grow your skills in C# and Golang.

• Prior experience building test automation tools or developing website crawlers.

• Proficiency in the English language both written and verbal sufficient for success in a remote and largely asynchronous work environment.

About the team

The Dynamic Analysis group at GitLab is charged with developing solutions which perform Dynamic Analysis Software Testing (DAST) and Fuzzing.DAST has historically been the domain of security teams rather than developers. Many organizational security teams are small and are not integrated into development teams so they lack the resources to test applications for vulnerabilities before releasing them to a production environment. Discovering vulnerabilities in production or late in the development process is expensive and creates unnecessary risk for both the organization and the users of the application. GitLab DAST is designed to be managed by developers and run against a pre-production staging server mitigating the risk of releasing vulnerable software to production.

Thanks to our Transparency value you can see what we are working on in our Team page. You can even see our roadmap here.

How GitLab will support you

• Benefits to support your health finances and well-being

• All remote asynchronous work environment

• Flexible Paid Time Off

• Team Member Resource Groups

• Equity Compensation & Employee Stock Purchase Plan

• Growth and development budget

• Parental leave

• Home office support

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role please apply and allow our recruiters to assess your application.