Staff Software Engineer, Static Analysis at GitLab
Confirmed open
Lead GitLab static-analysis engine architecture and AI-assisted evaluation; remote only in Canada, Israel, the UK or the United States.
- Location
- Remote
- Work arrangement
- remote
- Technologies
- Docker, Go
Create a free application profile — Keep your skills and projects in a reusable profile. Private by default; you choose when to share. Apply for this job directly with the employer.
Role overview
The Security Factory Code Scanning team builds tools to detect vulnerabilities in source code. This staff engineer defines the long-term engine architecture.
Responsibilities
- Design parsing, symbol resolution, intermediate representations, call graphs and taint/data-flow analysis across languages.
- Define specifications for engineers and coding agents, evaluate detection against vulnerable benchmark applications, mentor the team and support on-call.
Qualifications
- Deep static/program analysis and application-security expertise, including CWE/OWASP detection, plus production Rust, Go or similar systems programming.
- Experience directing and evaluating LLM coding workflows, performance work, CI/CD and clear architectural communication.
Technology in this role
- Go: Deep static/program analysis and application-security expertise, including CWE/OWASP detection, plus production Rust, Go or similar systems programming.
How to apply
Review the original posting and apply through the employer’s careers page.
View source and applySource checked: 2026-10-22