SavedFor employers

Threat Research Engineer

GitLab

  • Bangalore, India (in office)
  • Full Time
  • First seen 4 Nov 2026
Apply on boards.greenhouse.io

GitLab is the intelligent orchestration platform for DevSecOps.

GitLab is hiring a Threat Research Engineer within its Sec Engineering team in Bangalore, India. The details below summarise the employer's own posting; applications happen on GitLab's official careers channel, not on GetFirstJob.

What the work involves

  • Research new attack surfaces and threat vectors, including AI coding agents, agent plugins, and package ecosystems.
  • Find and responsibly disclose vulnerabilities in open source projects and developer tools.
  • Analyze software supply chain incidents and events.
  • Build AI-powered workflows and agents that automate research, analysis, and detection.
  • Build and maintain the cloud-based systems behind our detection and advisory work.
  • Improve the quality and coverage of our vulnerability and malware advisories.

What the employer asks for

  • Hands-on security experience in research, malware analysis, penetration testing, or security tooling, with an understanding of package ecosystems and software supply chain attacks.
  • Both a developer mindset and an adversarial mindset: you can build systems and think about how to break them.
  • Demonstrated experience using AI in real work, such as building with large language model (LLM) application programming interfaces (APIs) or agent frameworks like LangChain, LangGraph, or agent software development kits (SDKs).
  • Strong programming skills in Go or Python, with good software engineering practices, including testing, code review, continuous integration and continuous delivery (CI/CD), and writing maintainable code.

Pay, location and application

The listing does not disclose salary, so raise compensation early in the process. The role is in office in Bangalore, India. The employer's Greenhouse board shows this listing last updated on 2026-11-03; it was first seen and checked as open on 4 November 2026.

Apply for Threat Research Engineer at GitLab. Applications happen on the employer's official careers posting, not on GetFirstJob. GetFirstJob does not collect resumes or charge candidates; never pay an application or interview fee.

Related openings

This is our short summary of the employer's listing. The full description, eligibility and deadline are on the employer's page.

Explore related openings