Manager, Infrastructure Security

An overview of this role

Infrastructure Security plays a critical role in GitLab as it holds responsibility for securing the infrastructure components that constitute our public cloud, cloud native, and software pipeline environments. In this high visibility role you’ll be responsible for setting the overall vision and strategy for infrastructure security within GitLab. You’ll work with the broader product security organization to help improve the overall cyber resilience of the GitLab product set for both cloud and self-hosted customers. 

Relevant Links:

• Infrastructure Security Overview 
• Security at GitLab 
• Infrastructure at GitLab 

What you’ll do  

• Develop and implement the infrastructure security team’s vision and strategic roadmap 
• Own and be responsible for securing 
• GitLab’s customer-facing infrastructure which encompasses our multi-tenant, Dedicated, government, and on-prem architectures.
• Infrastructure that supports GitLab’s software supply chain.
• Provide professional guidance and input on infrastructure security within and outside of your team
• Collaborate with other security teams in support of 
• cross-team security efforts
• Process improvements
• Driving down risk across the organization
• Build collaborative cross-functional partnerships with teams across 
• Infrastructure Engineering
• Engineering and Development
• Product Management; and
• Legal 
• Manage an existing high performing team of infrastructure security professionals along with hiring new members as appropriate
• Lead and mentor your team by
• helping grow their skills and experience
• fostering a culture of continuous improvement
• holding regular 1:1’s
• being your team’s role model in terms of exemplifying GitLab company values, positive thinking, and managing conflict
• Establish and implement security policies, procedures, standards, and guidelines in support of infrastructure security
• This position reports to the VP of Product Security and be expected to
• Draft and successfully deliver on quarterly Objectives and Key Results (OKRs)
• Align vision and roadmap with the broader product security strategy

What you’ll bring  

• Experience with:
  • Public cloud security
    • Ideally, practical experience with site-reliability engineering
  • CI/CD at a practitioner level
  • Google Cloud Platform or Amazon Web Services
  • Docker, Kubernetes, Cloud Native technologies and Serverless technologies
  • Managing SaaS infrastructure security related issues especially within regulated environments such as FedRAMP and GDPR
  • leading and implementing automation implementations in the service of infrastructure security (things like CSPM, Ansible, Terraform, etc)
• Knowledge of:
  • infrastructure security issues, mitigations, and a solid grasp of the current global threat landscape
  • Distributed architectures
  • Systems design at an infrastructure component level
  • Threat modeling at the infrastructure level
  • Trends and practices in AI security at the infrastructure level
• Strongly skilled in:
  • communication, including verbal, written
  • presentation skills to a variety of stakeholders
  • Collaborating with a global and diverse workforce
  • Adapting to evolving circumstances, technologies, and strategic priorities, while leading complex initiatives
  • Managing and developing teams of at least 10 people
• Able to:
  • deliver results that are “good enough” in the face of ambiguity and imperfect knowledge
  • excel in a remote-only, asynchronous, multicultural, and distributed environment
• Alignment with Manager responsibilities as outlined in Leadership at GitLab