Senior Manager, Security Incident Response Team (USA)

<div class="content-intro"><p>GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.</p> <p>The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our <a href="https://handbook.gitlab.com/handbook/values/">values</a> and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. <a href="https://www.youtube.com/watch?v=OuZIb5zszQI">Co-create the future with us</a> as we build technology that transforms how the world develops software.</p> <p>*<em>Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.</em></p></div><h4><strong>An overview of this role</strong></h4> <p>We’re looking for a senior manager to lead the GitLab security incident response team (SIRT) in the Americas region. GitLab SIRT manages and investigates cybersecurity incidents for all GitLab operating environments and operates in a tierless SOC model. GitLab SIRT is responsible for threat hunting, alert triage, security investigations, deep dive DFIR, large scale incident response, among other responsibilities. This person should have a technical background, be comfortable leading a team that owns the full incident lifecycle from alert triage to incident retrospective actions, be skilled in leading large complex incidents, and training others to do the same. </p> <p>We are looking for a person who makes good business decisions under pressure and someone who is always looking for opportunities to “shift left” and improve defenses, leveraging AI and automation where possible to optimize workflows. In this role you will develop incident responders and maintain a culture of high performance - leading incident response and defending GitLab infrastructure and products such as <a href="http://gitlab.com">GitLab.com</a>, GitLab Dedicated, and GitLab Dedicated for Government (FedRAMP). </p> <p>This role requires availability during US West Coast business hours. Candidates based on the West Coast are preferred, though candidates in other time zones who are comfortable working these hours are also welcome to apply. This role may require some after hours and weekend time to support SIRT engineers during high severity incidents. </p> <p><br>Find out more about the Security Operations Department here:</p> <ul> <li><a href="https://handbook.gitlab.com/handbook/security/security-operations/sirt/">Security Incident Response Team</a></li> <li><a href="https://handbook.gitlab.com/handbook/security/security-operations/trustandsafety/">Trust and Safety Team</a></li> <li><a href="https://handbook.gitlab.com/handbook/security/security-operations/security-logging/">Security Logging Team</a></li> <li><a href="https://handbook.gitlab.com/handbook/security/threat-management/red-team/#red-team-metrics">Red Team</a></li> <li><a href="https://handbook.gitlab.com/handbook/security/security-operations/signals-engineering/">Signals Engineering Team</a></li> </ul> <p><strong>What you’ll do</strong> </p> <ul> <li>Serve as trusted advisor as part of the security division’s leadership team, actively sh ... (truncated, view full listing at source)