Senior Manager, Product Security Engineering (Security Posture & Supply Chain)

GitLab
Canada, Israel, United Kingdom, United States
Workplace: RemoteFull timeUSD 168,000 - 245,000 annuallyFunction: Supply Chain & LogisticsSkills: ["Leadership","Coaching","Written communication","Sound judgment","Driving measurable impact"]

Lead the Security Posture Management team in Product Security, securing GitLab’s software factory by driving governed rollouts of security capabilities across the SaaS estate. Set secure baselines, reduce systemic risk through posture and token governance, and establish proactive software supply chain security (including third-party governance and SBOM requirements). Own risk register operations, partner with Compliance for audit evidence, and represent the work externally while leading and scaling the team.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
GitLab
GitLab
1 day ago

Senior Manager, Product Security Engineering (Security Posture & Supply Chain)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Lead the Security Posture Management team in Product Security, securing GitLab’s software factory by driving governed rollouts of security capabilities across the SaaS estate. Set secure baselines, reduce systemic risk through posture and token governance, and establish proactive software supply chain security (including third-party governance and SBOM requirements). Own risk register operations, partner with Compliance for audit evidence, and represent the work externally while leading and scaling the team.
Location: Canada, Israel, United Kingdom, United States
Workplace: Remote
Employment Type: Full time
Job Function: Supply Chain & Logistics
Seniority: Manager level

Key Responsibilities

  • •Lead comprehensive, governed rollouts of GitLab security capabilities across the estate, aligning projects to the Project Security Configuration Standard and keeping them aligned.
  • •Set a security baseline that accelerates engineering with secure defaults and paved paths instead of project-by-project negotiation.
  • •Serve as Customer Zero for security features by capturing adoption friction at scale and feeding evidence to Product and Engineering.
  • •Establish proactive software supply chain security, including third-party component governance, trusted dependency controls, and requirements behind product-level SBOMs.
  • •Own operations of the Product Security Risk Register and create metrics/dashboards to provide a single data-driven view of security posture.

Pay and Benefits

Salary: USD 168,000 - 245,000 annually
Perks:Paid LeaveEquityLearning BudgetParental Leave

Key Requirements

  • •Experience managing a security or engineering team, including hiring, performance, and career development.
  • •Technical fluency across security posture management, software supply chain security, and secure configuration of a large SaaS estate.
  • •A track record driving broad, governed rollouts of security capabilities across an engineering organization you do not own, sustaining adoption after launch.
  • •Experience translating security requirements into engineering controls that can be met without slowing teams down.
  • •Familiarity producing control evidence for audit, certification, or maturity assessments, partnering with Compliance/GRC counterparts.
Experience:DevSecOpsSaaSSoftware supply chain securitySecurity posture managementGRC
Skills:LeadershipCoachingWritten communicationSound judgmentDriving measurable impact
Tech Stack:SBOMSaaSSecurity posture managementToken governanceSecurity control evidenceRisk registerMetricsDashboards

Company Brief

GitLab
Provides a single application for the complete DevSecOps lifecycle, offering source code management, CI/CD, security, and collaboration tools to help teams deliver software faster and more securely.
Industry: Developer Tools
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2011
WebsiteLinkedIn