# Senior Security Risk Engineer at GitLab

- Company: GitLab
- What the company does: The intelligent orchestration platform for DevSecOps, enabling teams and agents to ship trusted software at enterprise scale. Backed by General Catalyst and Khosla.
- Company website: https://about.gitlab.com/
- Type: Startups
- Level: Senior
- Location: Remote, Canada; Remote, United States
- Work setup: Remote
- Posted: 2026-09-29
- Apply by: 2026-11-23
- Apply: https://job-boards.greenhouse.io/gitlab/jobs/8846304002?utm_source=1752vc&utm_medium=careers
- Page: https://www.1752.vc/careers/jobs/gitlab-senior-security-risk-engineer/

## About the role

GitLab's Security Risk function is responsible for reducing risk across the security division: third-party risk (TPRM), annual security risk assessments, quarterly risk reporting, and remediation of security findings. As a Senior Security Risk Engineer, you'll take ownership of risk identification, quantification, and remediation tracking across the business, and you'll be a driving force behind automating and modernizing how the team does this work using AI and scripting. Found on 1752vc Careers, the job board for startup and VC roles.

## What they're looking for

- Own risk identification, analysis, and prioritization across third-party risk (TPRM), security risk assessments, and security findings, using an established risk framework (e.g., NIST RMF, ISO 31000, or NIST 800-39)
- Translate technical vulnerabilities, control gaps, and risk findings into clear, quantified risk statements that non-security stakeholders and leadership can act on
- Drive remediation of findings and risk exceptions to closure, partnering with Engineering, IT, Product, and Legal, and escalating stalled or high-severity items
- Mature and maintain a risk register and quarterly reporting cadence that gives leadership clear visibility into open risk, remediation progress, and trends
- Own and mature AI risk management, including AI impact assessments, AI risk assessments, and risk treatments, to support ISO 42001 certification
- Design, develop, and implement key risk indicators and supporting metrics for top risks in the risk register

Tags: Security Assurance

Source: 1752vc Careers, https://www.1752.vc/careers/jobs/gitlab-senior-security-risk-engineer/