GitLab interviews

“Candidates for Security Engineer roles can expect the hiring process to follow the order below, with modifications to the process as required, based on specific situations.”

“Ability to discover and patch SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond).”

“Security threats are rapidly understood and contained, with humans directing intelligent automation and every incident making GitLab more resilient.”

“Handle communications with independent vulnerability researchers and design appropriate mitigation strategies for reported vulnerabilities.”