> Markdown version of [/jobs/ext/1392436-senior-software-security-engineer](https://www.wearedevelopers.com/jobs/ext/1392436-senior-software-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Software Security Engineer

- **Company:** GitLab
- **Location:** UK
- **Experience:** Expert
- **Salary:** £139,200.0 - £196,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Software as a Service, Distributed Systems, Ruby on Rails, Ruby, Runbook, Software Engineering, Google Cloud, Cloud Platform System, Software Security, Gitlab, Containerization, Codebase, Software Coding
- **Published:** July 23, 2026
- **Apply:** https://www.totaljobs.com/job/senior-software-security-engineer/gitlab-job107731349

## About the Role

You will engineer security improvements to the GitLab product as well as building and maintaining the tools we use to detect and prevent abuse on our SaaS platforms. A strong software engineering background with experience in large Ruby/Rails codebases is required. As a senior engineer on the Trust and Safety team, you will predictively identify abuse patterns and trends and build anomaly detection and prevention systems to mitigate abusive users and their activities.

This role is an ideal fit for candidates with software engineering backgrounds interested in moving into security engineering. Formal security engineering experience is not a hard requirement for this role., * Strong software development skills with experience in Ruby/Rails

 * Experience working on distributed applications with large codebases and deployed in cloud environments strongly preferred
 * Passion/desire to proactivity develop security engineering skills

Comfortable working in an all remote environment where results and impact matter above hours worked

Strong experience with cloud native development (Google Cloud Platform (GCP) and/or AWS)

Interest in "thinking like a hacker" and defending against attacks with an "automation first" mindset

Interest in handling trust and safety security incidents and collaborating with engineering to harden platform defenses to combat abuse campaigns

Experience working on an AI native development team maintaining teams of agents and acting as a code reviewer and experience abstracting your role away from writing code for most cases.

## Description

* Maintain core abuse prevention systems and build new abuse detection rules to identify and prevent evolving platform abuse such as spam, AI/token, SEO optimization/redirects and other financially motivated abuse campaigns.
 * Become a core maintainer for our in-house abuse platform (Ruby on Rails monolith) and be comfortable supporting and building new features for the platform.
 * Improve and expand agentic AI capabilities in our abuse mitigation tools, including improving multi agent reasoning decision patterns with a target to reduce HITL operational load.
 * Lead collaboration with peer engineering teams to deliver safety improvements for the GitLab product
 * Resolve automation gaps and create efficient, automated processes
 * Create and maintain documentation such as runbooks and procedures


## Related Videos

- [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers)
- [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson)
- [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [Coroutine explained yet again 60 years later](https://www.wearedevelopers.com/videos/690-coroutine-explained-yet-again-60-years-later)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Stop Googling Git Commands. Start Actually Learning Git.](https://www.wearedevelopers.com/magazine/730-stop-googling-git-commands-start-actually-learning-git)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [What is Agentic Programming and Why Should Developers Care?](https://www.wearedevelopers.com/magazine/625-what-is-agentic-programming-and-why-should-developers-care)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [Why SmartGit Is More Than a Git Client](https://www.wearedevelopers.com/magazine/689-why-smartgit-is-more-than-a-git-client)