Job Description
About the role
You won't be sitting in an ivory tower throwing policies over the fence. You will be embedded directly within our Platform team in a true DevSecOps capacity. Operating as a highly technical individual contributor, you will bridge the gap between product-led engineering and Corporate IT.
You will play a hands‑on role in challenging the security architecture of production and corporate IT infrastructure.
In your first 6‑12 months, you will design and implement our next‑generation cloud security architecture across AWS and GCP, while helping to build and mature our internal SOC capabilities, including detection and response.
You will take ownership of Microsoft Sentinel, enhancing our SIEM/SOAR capabilities, and strengthen identity and access management through improved and automated RBAC across AWS, Microsoft Entra, and internal systems.
You will also drive a shift‑left approach to security by embedding controls into GitLab C...