SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
GitLab is seeking an Intermediate Backend Engineer to join the SSCS (Software Supply Chain Security) Add-On team. You'll build dedicated software supply chain security features for regulated enterprise organizations, helping customers control software dependencies, verify artifact integrity, and identify malicious packages before they reach production.
In this role, you'll work primarily in Ruby on Rails with Go services as needed, building backend features that integrate with GitLab's existing security scanning infrastructure. Your responsibilities include implementing well-scoped backend features across the Add-On's supply chain security product, including package policy integrations, ingestion pipeline improvements, signing and verification support, and reliability-focused work. You'll build and maintain integrations between Add-On functionality and GitLab's software composition analysis scanning infrastructure so findings appear consistently in merge request security reports.
You'll write and maintain comprehensive automated test coverage using RSpec and integration tests to improve reliability and reduce regressions. As a generalist contributor on a small team, you'll take on work across multiple feature areas as priorities evolve and have meaningful influence on implementation details, team practices, and product experience. You'll participate actively in code review, contribute clear internal documentation, and coordinate with adjacent Software Supply Chain Security teams including Dependency Firewall and Malware Database.
This is a fully remote, async-first role within GitLab's values-driven environment. Clear written communication and thoughtful coordination across time zones are essential. You'll collaborate effectively in an asynchronous workflow with occasional off-hours overlap when needed.
Required qualifications include backend development experience with ability to deliver maintainable production code, solid proficiency in Go/Python/Ruby on Rails, and strong PostgreSQL fundamentals. You should have strong testing discipline with RSpec or equivalent experience, clear written communication skills, and ability to manage scoped work independently. Interest in package ecosystems (npm, Maven, PyPI, OCI containers) and software supply chain security, DevSecOps, or security-adjacent product development is valued.
