Gitlab

Overview

As an Intermediate Backend Engineer on the SSCS Add-On team at GitLab, you'll help build a dedicated software supply chain security feature for regulated enterprise organizations.

About Gitlab

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation.

Requirements & Eligibility

• Backend development experience with the ability to deliver maintainable production code.
• Solid proficiency in Go/Python/RoR and strong PostgreSQL fundamentals.
• Familiarity with Golang, or a willingness to learn and work across both Ruby on Rails and Go.
• Strong testing discipline, including experience with RSpec or an equivalent testing framework.
• Clear, direct written communication skills and experience collaborating with distributed teammates in asynchronous workflows.
• Ability to manage scoped work independently, communicate progress clearly, and adjust as team priorities shift.

Key Responsibilities

• Implement well-scoped backend features across the Add-On's supply chain security product, including package policy integrations, ingestion pipeline improvements, signing and verification support, and reliability-focused work.
• Build and maintain integrations between Add-On functionality and GitLab's existing software composition analysis scanning infrastructure.
• Write and maintain comprehensive automated test coverage, including RSpec and integration tests.
• Take on work across multiple feature areas as priorities evolve, contributing as a generalist where the team needs support most.
• Participate actively in code review by giving thoughtful, actionable feedback.
• Contribute clear internal documentation for the features and behavior you ship.
• Coordinate with adjacent Software Supply Chain Security teams, including Dependency Firewall and Malware Database.
• Collaborate effectively in an async-first environment across global time zones.