Threat Intelligence Engineer

We are looking for a seasoned Threat Intelligence Engineer to join us as a dedicated Senior Security Engineer, TI. This role is part of a program with an existing foundation of reporting templates, tools, feeds, and industry connections built by the Security Operations team.

Your mission will be to provide actionable intelligence that empowers GitLab to make informed, proactive decisions about security, and to get in front of threats before they materialize.

You will work in partnership with Security Operations engineers and across security, infrastructure, and product teams to keep our customers, platform, and organization secure., * Monitor the threat landscape, identify and analyze the risks most relevant to GitLab, and raise awareness through ad-hoc Flash Reports.

• Administer our Threat Intelligence Platform and continue building out our open-source, proprietary, and internal intelligence collection pipeline.
• Support incident response through malware analysis and threat-actor tracking to stay one step ahead of top threats.
• Collaborate on Purple Team Flash Operations, turning emerging threats into exercises that validate and improve our defensive capabilities.
• Build meaningful relationships with industry peers, share intelligence, and collaborate on emerging threats.
• Write code, leverage AI, and build automation to improve process efficiencies on the team., This role is the sole dedicated member of a team within the Security Operations department. You will report to a Security Manager based in Australia who also runs the SIRT APAC Team. Security Operations includes SIRT, Trust and Safety, Signal Engineering, Red Team, and Security Logging.

• Proven track record of delivering actionable intelligence that has had a meaningful impact on the security of an organization.
• Experience working with a Threat Intelligence Platform (TIP) and managing ingested and exported threat feeds.
• Experience researching adversaries using OSINT and structured analytical techniques.
• Ability to automate tasks by writing basic scripts or programs, preferably with Python.
• Excellent professional communication skills, both written and verbal, with the ability to articulate complex topics clearly and concisely.
• Optional: experience reverse-engineering malware, particularly macOS and Linux malware, and malware delivered via code repositories.
• Optional: public examples of blogs or open-source work related to threat intelligence.

• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation / Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave, Base salary range for United States residents is $140,000 to $200,000 USD. The role is fully remote with eligibility for specific locations subject to internal policy.