Remote Product Security Engineer Jobs
Remote product security engineer jobs are open across the U.S. at remote-first software companies, distributed fintech teams, and cloud-native organizations in sectors like technology, healthcare, and financial services. Employers hiring remote product security engineers right now include Humana, Zeta Global, and DigitalOcean. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 55+ Remote Product Security Engineer jobs
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software.
- Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
We are hiring a Staff Product Security Architect to join our Security Platforms and Architecture organization at GitLab.
Rather than operating as a purely consultative body, Security Architecture at GitLab functions as a hands-on technical driver. Our mission is to embed proactive guidance directly into modern developer workflows and automated coding environments, embedding security standards into the software development process from the outset. We strive to enable teams to deliver secure, resilient software seamlessly while minimizing reliance on manual security gates.
In this role, you will collaborate closely with product engineering organizations, spearhead architectural strategy for critical capabilities, and serve as the primary Security Owner driving risk reduction for key entries within our risk management framework. Your daily work will span architectural design reviews, technical prototyping, and establishing scalable patterns that enable engineering teams to execute autonomously.
What you’ll do
- Partner with engineering and product leadership across GitLab, developing enough context in their domains to anticipate security problems rather than react to them
- Lead security architecture and design work for strategic initiatives, and provide direction to the cross-functional teams delivering them
- Identify, assess, and prioritise systemic security risks, and act as Security Owner for high-priority items in the Product Security Risk Register, co-executing remediation with the teams who own the code
- Codify recurring security decisions into reusable artifacts — guardrails, standards, design patterns,skills, and reference threat models — delivered into developer and AI coding tool workflows
- Build proofs of concept and prototypes to unblock engineering teams and shorten the distance between a security requirement and a working implementation
- Conduct security architecture reviews for large or strategic projects, and coordinate with Application Security so that review coverage is comprehensive and correctly prioritised
- Threat model new and existing systems, and establish the patterns that let teams threat model their own work
- Work with Security Research on proactive exploration of unknown risks in GitLab's architecture
- Anticipate emerging security challenges and propose architectural responses before they reach implementation
- Mentor security engineers across the division, and represent security architecture to engineering audiences
What you’ll bring
- Depth in application security architecture, including authentication and authorization models, privilege escalation, multi-tenant isolation, and trust boundary analysis
- Experience securing distributed systems, including service-to-service authentication, secrets handling, and the failure modes of security decisions made across process boundaries
- Working knowledge of software supply chain security: build and release integrity, artifact provenance, and dependency risk
- A track record of proactive architecture work — identifying risk before it becomes an incident, and designing something that prevents a class of problem rather than an instance of one
- Demonstrated ability to build trusted relationships with engineering leadership and influence technical direction through expertise rather than gatekeeping
- Experience defining security standards or patterns that teams adopted without being compelled to
- The ability to operate strategically while remaining hands-on, including reading unfamiliar code, building prototypes, and contributing changes
- Clear written communication, and the ability to make a security argument to an engineering audience that does not already agree with it
- A view on how security guidance should be authored and delivered for AI coding tools, not only for humans
About the team
Security Architects are a part of our Security Platforms and Architecture team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. Composed of Security Architecture, Security Research, and Application Security, we focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering’s development velocity.
In FY27, we're implementing a new organizational model where each architect is dedicated to a specific functional area of GitLab's product, enabling deeper context, stronger relationships, and more proactive security guidance. As the Core DevOps architect, you'll be part of a team that includes architects focused on AI and the Sec Section, creating opportunities for collaboration on cross-cutting security challenges while maintaining specialized expertise in your domain.
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$168,000 - $238,000 USD
How GitLab Supports Full-Time Employees
- Benefits to support your health, finances, and well-being
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation & Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software.
- Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
We are hiring a Staff Product Security Architect to join our Security Platforms and Architecture organization at GitLab.
Rather than operating as a purely consultative body, Security Architecture at GitLab functions as a hands-on technical driver. Our mission is to embed proactive guidance directly into modern developer workflows and automated coding environments, embedding security standards into the software development process from the outset. We strive to enable teams to deliver secure, resilient software seamlessly while minimizing reliance on manual security gates.
In this role, you will collaborate closely with product engineering organizations, spearhead architectural strategy for critical capabilities, and serve as the primary Security Owner driving risk reduction for key entries within our risk management framework. Your daily work will span architectural design reviews, technical prototyping, and establishing scalable patterns that enable engineering teams to execute autonomously.
What you’ll do
- Partner with engineering and product leadership across GitLab, developing enough context in their domains to anticipate security problems rather than react to them
- Lead security architecture and design work for strategic initiatives, and provide direction to the cross-functional teams delivering them
- Identify, assess, and prioritise systemic security risks, and act as Security Owner for high-priority items in the Product Security Risk Register, co-executing remediation with the teams who own the code
- Codify recurring security decisions into reusable artifacts — guardrails, standards, design patterns,skills, and reference threat models — delivered into developer and AI coding tool workflows
- Build proofs of concept and prototypes to unblock engineering teams and shorten the distance between a security requirement and a working implementation
- Conduct security architecture reviews for large or strategic projects, and coordinate with Application Security so that review coverage is comprehensive and correctly prioritised
- Threat model new and existing systems, and establish the patterns that let teams threat model their own work
- Work with Security Research on proactive exploration of unknown risks in GitLab's architecture
- Anticipate emerging security challenges and propose architectural responses before they reach implementation
- Mentor security engineers across the division, and represent security architecture to engineering audiences
What you’ll bring
- Depth in application security architecture, including authentication and authorization models, privilege escalation, multi-tenant isolation, and trust boundary analysis
- Experience securing distributed systems, including service-to-service authentication, secrets handling, and the failure modes of security decisions made across process boundaries
- Working knowledge of software supply chain security: build and release integrity, artifact provenance, and dependency risk
- A track record of proactive architecture work — identifying risk before it becomes an incident, and designing something that prevents a class of problem rather than an instance of one
- Demonstrated ability to build trusted relationships with engineering leadership and influence technical direction through expertise rather than gatekeeping
- Experience defining security standards or patterns that teams adopted without being compelled to
- The ability to operate strategically while remaining hands-on, including reading unfamiliar code, building prototypes, and contributing changes
- Clear written communication, and the ability to make a security argument to an engineering audience that does not already agree with it
- A view on how security guidance should be authored and delivered for AI coding tools, not only for humans
About the team
Security Architects are a part of our Security Platforms and Architecture team, who address complex security challenges facing GitLab and its customers to enable GitLab to be the most secure software factory platform on the market. Composed of Security Architecture, Security Research, and Application Security, we focus on systemic product security risks and work cross-functionally to mitigate them while maintaining Engineering’s development velocity.
In FY27, we're implementing a new organizational model where each architect is dedicated to a specific functional area of GitLab's product, enabling deeper context, stronger relationships, and more proactive security guidance. As the Core DevOps architect, you'll be part of a team that includes architects focused on AI and the Sec Section, creating opportunities for collaboration on cross-cutting security challenges while maintaining specialized expertise in your domain.
The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
United States Salary Range
$168,000 - $238,000 USD
How GitLab Supports Full-Time Employees
- Benefits to support your health, finances, and well-being
- Flexible Paid Time Off
- Team Member Resource Groups
- Equity Compensation & Employee Stock Purchase Plan
- Growth and Development Fund
- Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.
See All 55 Remote Product Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Product Security Engineer Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Non-Profit & Social Services
- Consulting & Professional Services
- Banking & Financial Services
What Employers Look For
The qualifications that appear most often in remote product security engineer jobs.
- Bachelor's degree in computer science, information security, or a related technical field
- Hands-on experience with threat modeling frameworks such as STRIDE or PASTA
- Proficiency in at least one scripting or programming language, commonly Python or Go
- Familiarity with OWASP Top 10, secure SDLC practices, and code review processes
- Experience with cloud security controls across AWS, Azure, or Google Cloud Platform
- Relevant certification such as CISSP, CSSLP, CEH, or an Offensive Security credential
Tips for Your Remote Product Security Engineer Job Search
Apply early to remote roles that fit
Migrate Mate lists remote product security engineer openings from across the U.S. in one place, so you can find roles that match your skills and apply directly before postings fill. Early applicants consistently get more responses on competitive remote listings.
Show your async security communication skills
Remote product security engineers document everything in writing, from threat model findings to code review feedback. Include writing samples, design documents, or security runbooks in your application materials so remote hiring managers can see how you communicate risk without a meeting.
Build a public record of security work
Verified bug bounty submissions, open-source security tooling contributions, or published vulnerability research give remote employers concrete proof of your skills. Product security teams at distributed companies rely on this kind of evidence more than on-site employers because they can't assess you in person.
Target companies with distributed engineering teams
Remote product security roles are most active at companies whose entire engineering organization is distributed, not those with a hybrid headquarters. Look for engineering blogs, public GitHub activity, or job listings that reference async-first culture and cross-functional remote product teams.
Remote Product Security Engineer Jobs: Frequently Asked Questions
How do I get a remote product security engineer job?
Target remote-first companies and distributed engineering teams that build software products, since they hire product security engineers far more consistently than traditional on-site employers. Remote hiring managers screen hard for self-direction and written communication, so demonstrate both clearly in your application materials. Hands-on skills in threat modeling, secure code review, and vulnerability management matter most, and candidates who can show documented remote contributions to security programs stand out.
Which companies hire remote product security engineers?
Companies hiring remote product security engineers right now include Humana, Zeta Global, and DigitalOcean, based on current remote listings on Migrate Mate as of September 2026. Remote openings tend to concentrate at remote-first SaaS firms, distributed fintech and healthtech companies, and cloud infrastructure organizations that embed security engineers directly into product teams.
Can you get a remote product security engineer job with no experience?
Yes, but remote entry-level product security roles are harder to land because employers expect you to work independently from day one with minimal hand-holding. Remote-first startups and mid-size SaaS companies are the most likely to hire junior candidates. Concrete security labs, bug bounty findings, open-source contributions, or a home lab documenting threat models give hiring managers something tangible to evaluate in place of formal work history.
Do you need a degree for remote product security engineer jobs?
Not always. Many remote employers weigh demonstrated skills, certifications like OSCP or CSSLP, and a portfolio of real security work over a formal degree. Remote hiring emphasizes what you can do asynchronously and independently, so candidates who can show threat modeling work, code review contributions, or vulnerability research findings regularly clear screening without a four-year degree.
Which industries hire the most remote product security engineers?
Most remote product security engineer openings sit in Technology & Software, Non-Profit & Social Services, and Consulting & Professional Services, per current remote listings on Migrate Mate as of September 2026. Those sectors hire product security engineers remotely because their distributed product and engineering teams need security expertise embedded across time zones rather than concentrated in a single office.
See All 55 Remote Product Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs