SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
GitLab is seeking a Senior Manager to lead the Security Posture Management (SPM) team within Product Security. This role owns the direction, delivery, and growth of a team responsible for securing GitLab's own software factory—the estate from which the company builds and ships its products.
You will lead comprehensive, governed rollouts of GitLab's security capabilities across the entire engineering organization, establishing security baselines that accelerate rather than gate development. The team serves as "Customer Zero" for GitLab's security features, capturing adoption friction at scale and feeding that evidence directly to Product and Engineering as a leading indicator of customer sentiment and roadmap driver.
Key responsibilities include: establishing proactive software supply chain security as a first-class capability (third-party component governance, trusted dependency controls, SBOM requirements); reducing systemic risk across groups and namespaces including lateral movement and token governance; owning the Product Security Risk Register and metrics dashboards; partnering with Compliance to produce control evidence for audits and certifications; and representing this work externally to strengthen go-to-market narrative and customer trust.
You will manage team hiring, performance, and career development while shaping how the team operates as it forms. The role requires technical fluency in security posture management, software supply chain security, and SaaS configuration; a track record of driving broad security rollouts across organizations you don't own; experience translating security requirements into controls that don't slow engineering; and the ability to drive measurable impact under ambiguity while breaking large problems into iterative wins. Strong async communication and sound judgment in an all-remote environment are essential.
