An overview of this role

We are seeking a Staff AI Product Security Architect to join our Security Platforms & Architecture Team with a specialized focus on securing GitLab's AI-powered DevSecOps capabilities, including GitLab Duo Agent Platform, GitLab Duo Chat, and multi-agent collaboration systems. As AI transforms software development from isolated processes into intelligent collaboration between developers and specialized agents, we need a security architect who can design robust security architectures that scale with our platform's growth.

This is a senior technical leadership position where you'll shape how GitLab approaches AI security across our entire platform. You'll be responsible for establishing secure-by-design principles for AI integrations, creating architectural patterns that engineering teams can leverage, and ensuring our AI capabilities meet enterprise security requirements. Your work will directly impact how millions of developers safely harness AI to accelerate their software development lifecycle.

As a Staff Architect, you'll work at the intersection of AI innovation and security excellence, partnering with Product, Engineering, and Security teams to translate complex AI security challenges into practical, scalable solutions. You'll have the opportunity to influence industry standards for AI security in DevSecOps platforms while working with teams that are defining the future of AI-assisted software development. This role offers the unique combination of deep technical challenges, strategic influence, and the ability to shape security practices that will protect the next generation of software development.

What You'll Do

Design and implement security architectures for AI integrations, including agent security, prompt injection prevention, and workflow validation
Establish secure-by-design principles and patterns for AI systems that enable engineering teams to build secure capabilities efficiently
Conduct comprehensive threat modeling and risk assessments for AI features and multi-agent orchestration platforms
Develop security standards for AI model integration, data handling, and agent communication protocols
Provide expert consultation to engineering teams on AI security architecture decisions and trade-offs
Create architectural documentation and reference implementations that accelerate secure AI development
Stay current with AI security threats, vulnerabilities, and industry best practices to inform architectural decisions
Collaborate with Security Research to translate vulnerability findings into architectural improvements
Partner with Product and Engineering leadership to balance security requirements with product velocity
Mentor engineers and security team members on AI security architecture principles
Work with legal and compliance teams to ensure AI systems meet regulatory requirements including EU AI Act, NIST AI RMF, and data privacy regulations
Contribute to industry thought leadership through technical documentation, standards development, and community engagement

What You'll Bring

8+ years of experience in security architecture or application security, with significant experience securing AI/ML systems
Deep understanding of AI system architectures and security vulnerabilities
Proven expertise in threat modeling and security architecture for complex distributed systems
Experience designing security controls for distributed applications and automated workflows
Track record of developing security standards adopted across engineering organizations
Strong knowledge of secure software development lifecycle practices and DevSecOps methodologies
Ability to communicate complex security concepts to diverse technical and non-technical audiences
Experience with AI frameworks, agent architectures, and orchestration platforms
Demonstrated ability to balance security requirements with business objectives
Strong collaborative skills with experience influencing technical decisions across organizations

Nice to have Qualifications:

Experience with AI workflow validation, agent testing, and monitoring approaches
Knowledge of AI regulatory compliance and governance frameworks
Programming skills in Python with hands-on experience in AI frameworks
Security certifications such as CISSP, CCSP, or similar
Experience with GitLab or similar DevSecOps platforms
Background in software engineering with expertise in distributed systems
Published work or presentations on AI security architecture

About the team

Security Architects are a part of our Security Platforms and Architecture team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. Composed of Security Architecture and Security Research, we focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering's development velocity.

The base salary range for this role’s listed level is currently for residents of listed locations only. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, and alignment with market data. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.

Staff AI Product Security Architect

Anywhere in the world

Remote

Senior

GitLab