Staff Corporate Security Engineer

What you'll do

• Lead the security architecture for GitLab's endpoint fleet with a primary focus on macOS systems.
• Design and support automated workflows for secure endpoint deployment, configuration, and lifecycle management.
• Manage endpoint and SaaS security configurations using Terraform, GitOps, and CI/CD pipelines.
• Define and enforce security baselines across macOS, iOS, Windows, and Linux devices.
• Develop patching and software distribution strategies that meet security and compliance requirements.
• Improve endpoint telemetry, detection models, and response capabilities in collaboration with internal teams.
• Drive process improvements to reduce manual work through policy-driven controls and automated change management.
• Mentor engineers and serve as a senior escalation point for complex endpoint security issues.

What we're looking for

• Experience designing and delivering endpoint, systems, or corporate security solutions with scalable, durable controls.
• Deep knowledge of endpoint management platforms like Jamf Pro or FleetDM, specifically for macOS environments.
• Strong hands-on ability with Terraform and Infrastructure-as-Code practices including module design and state management.
• Experience working with GitOps workflows involving Git repositories, merge requests, and automated pipelines.
• Proficiency in scripting or programming for automation and security tooling using bash, Python, PowerShell, or Go.
• Familiarity with cloud identity providers and directories such as Okta, Google Workspace, or LDAP.
• Ability to communicate clearly and collaborate across distributed teams in an all-remote environment.