Principal Field Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the main security liaison for enterprise clients' inquiries, requests, and issues.

• Attend customer and prospect meetings to offer expert insight into GitLab’s security practices and controls.

• Create and maintain templates, playbooks, fallback strategies, and training materials to streamline and expedite negotiations.

• Oversee customer assurance initiatives via the Customer Assurance Activities Service Desk.

• Provide support for complex security questionnaires, RFPs, and risk assessments.

• Conduct thorough reviews of contracts for customer agreements and vendor partnerships.

• Evaluate security and compliance provisions in legal documents.

• Offer risk-based suggestions and remediation advice for contractual security obligations.

• Collaborate with Legal, Sales, Product, and Procurement teams to negotiate security-related contract terms.

• Manage escalations, work collaboratively across teams, and devise solutions that empower business partners to finalize deals.

• Document and monitor contract-associated security commitments.

• Create internal and external security materials, including blog articles, whitepapers, technical standards, and training resources for field sales enablement.

• Monitor changing regulatory requirements and customer security trends.

• Build and enhance GitLab’s security reputation within the industry.

• Maintain and improve GitLab’s Trust Center and self-service security resources.

• Offer strategic insights based on customer security issues to promote revenue growth.

• Engage in Quarterly Business Reviews to influence product and security roadmap strategies.

• Mentor and support members of the Security Assurance team.

• Drive ongoing enhancements of Field Security processes and documentation.

• Design and roll out solutions that empower Sales-facing teams to engage in security discussions with clients.

⛳️ Requirements

• 10+ years of experience in information security, with a minimum of 5 years in customer-facing security roles.

• Extensive knowledge of security frameworks and standards such as SOC 2, ISO 27001/27017/27018/42001, FedRAMP, and NIST CSF.

• Expertise in GDPR, CCPA, DORA, and the EU AI Act.

• Proven success in contract negotiations and reviews of security/privacy agreements.

• Superior written and verbal communication skills, with the ability to convey complex technical concepts to varied audiences.

• Experience in developing security content, including blogs, whitepapers, and presentations.

• Strong understanding of cloud security, SaaS security models, and DevSecOps methodologies.

• Experience collaborating across Sales, Legal, Product, and Engineering teams.

• Ability to balance security risks with business objectives.

• Experience presenting at conferences is an added advantage.

• Relevant certifications such as CISSP, CISA, CISM, CCSP, ISO 27001 Lead Implementer/Auditor, or CIPP/CIPM are preferred.

• Must be a United States Citizen.

🏝️ Benefits

• Benefits designed to support your health, financial stability, and overall well-being.

• Flexible Paid Time Off.

• Team Member Resource Groups.

• Equity Compensation & Employee Stock Purchase Plan.

• Growth and Development Fund.

• Parental Leave.