Staff Backend Engineer – Software Composition Analysis

About the role

GitLab is looking for a Staff Backend Engineer to join the Software Composition Analysis (SCA) team. In this senior position you will design and implement security features that help customers understand and manage risks in their software supply chain, focusing on dependency and container scanning.

Key responsibilities

• Implement complex features for dependency scanning and container scanning, improving coverage, accuracy, and adoption.
• Solve novel technical challenges in SCA, creating reusable patterns for large‑scale data correlation.
• Guide architectural and implementation decisions in partnership with engineering managers, product managers, and peers.
• Introduce new data points such as reachability analysis and supply‑chain poisoning detection.
• Collaborate across multiple time zones to ensure consistent delivery and quality.

Required profile

• Proven hands‑on experience building security‑focused backend systems at scale.
• Deep understanding of software supply‑chain risks and mitigation techniques.
• Ability to work independently and lead technical discussions within a distributed team.
• Strong problem‑solving skills and a track record of delivering production‑ready features.

Required skills

• C/C++
• Yocto build environment
• Container technologies (e.g., Docker)
• Dependency scanning
• Container scanning
• Software composition analysis
• Large‑scale data correlation
• Security vulnerability detection