A live role

Threat Research Engineer, Security Factory: Threat Research

from GitLab · read the original and apply on their site

Remote, Israel; Remote, Poland; Remote, United Kingdom

Our take: The real work here is taking security research from first question to deployed proof of concept, building AI-powered tooling to find and disclose threats, and publishing what you learn.

If you love chasing a security question from first hunch to working proof of concept, this is a role where you build the systems and also think like the attacker trying to break them. You will research emerging threats in AI agents and package ecosystems, automate the tedious parts with AI, and publish what you find for the world to read. It suits someone who wants full ownership, enjoys writing clearly, and cares about getting the dangerous details right.

Needs

  • research deep dives
  • building software
  • automating with ai
  • infrastructure tending
  • writing findings
  • public speaking

Rewards

  • building prototypes
  • visible impact
  • publishing openly
  • inventing ideas

Demands

  • variety of work
  • a fast pace
  • owning outcomes
  • data-driven decisions
  • remote working

Grows

  • pattern finding
  • learning new domains
  • spotting trends
  • translating jargon

Values

  • ethics first
  • pragmatism
  • rigour
  • user obsession
  • learning culture

Drains

  • being on call
  • advisory upkeep
  • system maintenance

Would you love this work?

See how what you love doing lines up with this role - it takes about ten minutes to find out.

Find what I'd love to do next