Gitlab logo

Senior Legal Counsel, Commercial

Gitlab
Full-time
Remote
What You’ll Do

Support the development, implementation, and management of our vulnerability management tooling in the FedRAMP environment, ensuring all services meet FedRAMP requirements.
Own and execute on a vulnerability management strategy across all GitLab cloud environments, our products, and their dependencies.
Collaborate cross-functionally to define, communicate, and measure the patch management strategy.
Provide the visibility and tooling necessary to continually assess and iterate on security best practices for our cloud environments and the Gitlab product.
Create documentation such as runbooks and procedures
Support other Product Security efforts where practical.
Support Security Operations in tracking new and emerging threats to our environments.
Ensure the protection of both GitLab and GitLab customer data.
What You’ll Bring

Proof of U.S. citizenship and residency
Ability to use GitLab
Demonstrated experience in cloud security, vulnerability management, asset management and related topics.
Development experience with Ruby, Go, Python.
Demonstrated experience working collaboratively with cross-functional teams.
Proficiency to communicate over a text-based medium (Slack, GitLab Issues, Email) and can succinctly document technical details.
Share our values, and work in accordance with those values
About the team

At GitLab the Vulnerability Management team is responsible for identifying, prioritizing, tracking and communicating vulnerabilities and remediation advice for detected vulnerabilities that have demonstrable impact to GitLab or our customers. We accomplish our mission with an automation first approach working closely with our Infrastructure, Engineering, Product, and Security teams to ensure adherence to the Gitlab Vulnerability Management Standard. Our scope encompasses GitLab’s infrastructure, software, packages, images and dependencies as defined in the handbook page, What does Vulnerability Management cover at GitLab?