Вакансии

Location: Indonesia; Nigeria; Turkey; United States About Gramian Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs. About the Role We are looking for experienced Application Security Engineers and Security-Focused Software Engineers to support a specialized AI security evaluation project. In this role, you will assess how effectively static analysis tools identify security vulnerabilities in Generative AI applications, particularly LLM agents and Retrieval-Augmented Generation (RAG) systems. You will build small, runnable repositories containing realistic examples of Sensitive Information Disclosure (SID) and Excessive Agency (EA) vulnerabilities, alongside fixed and near-miss versions. You will analyze code paths, identify security weaknesses, define authorization contexts, develop deterministic tests, and document findings. Your work will help improve the reliability of security tools and strengthen how AI systems are evaluated for application-level vulnerabilities. LOCATION: Remote EXPERIENCE: 5+ years in application/product security or security-focused software engineering PROJECT: GenAI application security evaluation and AI training TECHNICAL FOCUS: Python, TypeScript, SAST, CodeQL, Semgrep, LLM agents, RAG, and MCP AI EXPERIENCE: Hands-on experience building LLM agents or RAG applications is required. Key Responsibilities Build runnable agent and RAG repositories containing code-reachable Sensitive Information Disclosure and Excessive Agency vulnerabilities. Develop realistic security scenarios involving tool calling, agent memory, Model Context Protocol (MCP), and other LLM application components. Create vulnerable, fixed, and hard-negative code variants with minimal security-relevant differences. Evaluate static application security testing (SAST) tools and assess their ability to detect genuine vulnerabilities while avoiding false positives. Perform source-to-sink analysis and trace relevant data flows, action paths, and trust boundaries. Annotate security findings, including affected assets, root causes, controls, severity, and residual risk. Define authorization contexts covering actors, tenants, identities, permitted data, actions, purposes, and recipients. Develop deterministic tests to validate vulnerable, fixed, and negative security behaviors. Recommend appropriate security controls and remediation approaches. Participate in technical calibration, peer reviews, and quality assurance activities. Requirements 5+ years of professional experience in application security, product security, or security-focused software engineering. Strong experience conducting secure code reviews and identifying application-level vulnerabilities. Practical knowledge of source-to-sink analysis, taint analysis, and static application security testing (SAST). Hands-on experience with security analysis tools such as CodeQL or Semgrep. Experience building or securing LLM agents and/or Retrieval-Augmented Generation (RAG) applications. Familiarity with frameworks and technologies such as LangChain, LlamaIndex, OpenAI or Anthropic SDKs, and Model Context Protocol (MCP). Strong understanding of authorization models, including: Actors, identities, and trust boundaries. Multi-tenant authorization and access control. OAuth, IAM, and identity management. Permitted data access and actions. Purpose and recipient restrictions. Document-level access control. Production-level coding experience in Python and/or TypeScript. Ability to distinguish genuine Sensitive Information Disclosure and Excessive Agency vulnerabilities from non-findings and false positives. Strong analytical skills and the ability to communicate technical security findings clearly.

Location: Bangladesh; Brazil; Colombia; Egypt; Ghana; India About Gramian Gramian Consultancy is a boutique consultancy specializing in IT professional services and engineering talent solutions. With a strong background in software engineering and leadership, we help companies build high-performing teams by matching them with professionals who truly fit their needs. About the Role We are looking for experienced Application Security Engineers and Security-Focused Software Engineers to support a specialized AI security evaluation project. In this role, you will assess how effectively static analysis tools identify security vulnerabilities in Generative AI applications, particularly LLM agents and Retrieval-Augmented Generation (RAG) systems. You will build small, runnable repositories containing realistic examples of Sensitive Information Disclosure (SID) and Excessive Agency (EA) vulnerabilities, alongside fixed and near-miss versions. You will analyze code paths, identify security weaknesses, define authorization contexts, develop deterministic tests, and document findings. Your work will help improve the reliability of security tools and strengthen how AI systems are evaluated for application-level vulnerabilities. LOCATION: Remote EXPERIENCE: 5+ years in application/product security or security-focused software engineering PROJECT: GenAI application security evaluation and AI training TECHNICAL FOCUS: Python, TypeScript, SAST, CodeQL, Semgrep, LLM agents, RAG, and MCP AI EXPERIENCE: Hands-on experience building LLM agents or RAG applications is required. Key Responsibilities Build runnable agent and RAG repositories containing code-reachable Sensitive Information Disclosure and Excessive Agency vulnerabilities. Develop realistic security scenarios involving tool calling, agent memory, Model Context Protocol (MCP), and other LLM application components. Create vulnerable, fixed, and hard-negative code variants with minimal security-relevant differences. Evaluate static application security testing (SAST) tools and assess their ability to detect genuine vulnerabilities while avoiding false positives. Perform source-to-sink analysis and trace relevant data flows, action paths, and trust boundaries. Annotate security findings, including affected assets, root causes, controls, severity, and residual risk. Define authorization contexts covering actors, tenants, identities, permitted data, actions, purposes, and recipients. Develop deterministic tests to validate vulnerable, fixed, and negative security behaviors. Recommend appropriate security controls and remediation approaches. Participate in technical calibration, peer reviews, and quality assurance activities. Requirements 5+ years of professional experience in application security, product security, or security-focused software engineering. Strong experience conducting secure code reviews and identifying application-level vulnerabilities. Practical knowledge of source-to-sink analysis, taint analysis, and static application security testing (SAST). Hands-on experience with security analysis tools such as CodeQL or Semgrep. Experience building or securing LLM agents and/or Retrieval-Augmented Generation (RAG) applications. Familiarity with frameworks and technologies such as LangChain, LlamaIndex, OpenAI or Anthropic SDKs, and Model Context Protocol (MCP). Strong understanding of authorization models, including: Actors, identities, and trust boundaries. Multi-tenant authorization and access control. OAuth, IAM, and identity management. Permitted data access and actions. Purpose and recipient restrictions. Document-level access control. Production-level coding experience in Python and/or TypeScript. Ability to distinguish genuine Sensitive Information Disclosure and Excessive Agency vulnerabilities from non-findings and false positives. Strong analytical skills and the ability to communicate technical security findings clearly.

Статический анализ кода (SAST) критических компонентов Linux: Анализ исходного кода ядра Linux, KVM/QEMU, libvirt, сетевых драйверов и технологий (OVS, DPDK), файловых систем (ext4, XFS, Btrfs);

Работа с инструментами безопасной разработки SAST, DAST, SCA, ASOC, MAST; Проведение аудитов безопасности приложений и сервисов компании;

• Понимание устройства прикладных/серверных web-приложений и микросервисной архитектуры.

Задачи: — Администрирование и развитие инфраструктуры средств защиты информации; — Участие в развитии Linux инфраструктуры с упором на вопросы информационной безопасности; — Инструментальный анализ безопасности открытого программного обеспечения и библиотек; — Внедрение и мониторинг средств защиты контейнеризации, с дальнейшим развитием этой области; — Исследование и применение современных решений и практик в области повышения безопасности Linux окружений, включая Hardening; — Разработка и актуализация внутренней нормативной документации в области защиты информации. Требования: — Уверенные знания основных методов обеспечения защиты операционных систем семейства Linux; — Опыт реализации hardening и аудита в Linux; — Опыт работы с контейнерной инфраструктурой Docker и Kubernetes, применение мер защиты и аудита в них; — Опыт инструментального анализа кода и ПО (SAST, DAST, OSA); — Практический опыт работы с SELinux, AuditD, AppArmor и другими инструментами для защиты Linux; — Опыт внедрения и администрирования как коммерческих, так и open source решений в сфере инфраструктурной безопасности. Условия: — Официальное оформление в аккредитованную ИТ-компанию; — Конкурентный оклад, премии по результатам работы; — Возможность работать над передовыми продуктами в сфере кибербезопасности; — Перспективы для профессионального и карьерного продвижения; — Корпоративные мероприятия, путешествия, спортивные активности онлайн и оффлайн; — Социальный пакет: ДМС со стоматологией, доплата больничных до 100% от оклада, 10 оплачиваемых day-off; — Возможность бесплатного обучения: внешние обучения, профильные конференции, внутренние курсы и электронная библиотека; — Скидки от компаний-партнеров на спорт, английский, психолог, интернет и другое; — Материальная помощь при важных событиях в жизни; — Удаленный формат работы либо современный офис рядом с м. Охотный ряд/Савёловская; — График работы: 5/2 с 9:00 до 17:30 или с 10:00 до 18:30.

Понимание устройства прикладных/серверных web-приложений и микросервисной архитектуры. Умение читать и анализировать кодовую базу (Java, JS/TS, Python, C, C++, C#) на уязвимости и НДВ.

Развивать и сопровождать кластеры Kubernetes: обновления, RBAC, резервное копирование. Строить CI/CD в GitLab: шаблоны пайплайнов, Helm, Argo CD, проверки безопасности (Trivy, SAST, SCA).

Задачи: — Формирование и реализация стратегии информационной безопасности компании с учётом бизнес-целей; — Управление рисками кибербезопасности и планирование мероприятий по их снижению; — Организация проверки исходного кода на уязвимости, включая методологии SAST и DAST; — Анализ и защита инфраструктуры, выявление и устранение угроз; — Контроль безопасных конфигураций серверов и сервисов, включая Docker, Kubernetes и облачные решения; — Взаимодействие с регуляторами: ФСТЭК, ФСБ, Минздрав и другими; — Адаптация продукта под требования регуляторов и ключевых заказчиков; — Проведение инспекционного контроля версий; — Развитие культуры кибербезопасности в компании; — Управление инцидентами и кризисными коммуникациями; — Взаимодействие с техническими и бизнес-командами; — Организация внутренних и внешних аудитов кибербезопасности; — Анализ результатов аудитов и контроль корректирующих мероприятий; — Мониторинг актуальных угроз; — Развитие и поддержка SOC; — Участие в отраслевых мероприятиях и обмен экспертизой; — Взаимодействие с ключевыми клиентами по вопросам кибербезопасности. Требования: — Опыт работы в кибербезопасности в IT не менее 5 лет; — Глубокое понимание требований профильных стандартов кибербезопасности; — Умение выстраивать процессы кибербезопасности и контролировать их исполнение; — Опыт руководства командами кибербезопасности численностью от 10 человек; — Опыт управления проектами в сфере кибербезопасности; — Способность принимать решения в кризисных ситуациях и расставлять приоритеты; — Умение эффективно взаимодействовать с разработчиками, бизнесом и топ-менеджментом; — Опыт переговоров с регуляторами и партнёрами; — Стратегическое мышление и системный подход. Условия: — Работа в офисе в Москве, проспект Андропова, Technopark Plaza; — Медицинская программа со стоматологией и психологами за счёт компании; — Компенсация обучения английскому языку и возможность карьерного роста; — Компенсация спортивных абонементов и участие во внутренних спортивных группах; — Работа в крупнейшей в России Digital Health платформе СберЗдоровье, объединяющей сервисы цифровой медицины.

Задачи: — Анализ безопасности программного обеспечения, создаваемого не техническими специалистами. — Организация процессов безопасной разработки, внедрение инструментов безопасной разработки. — Анализ безопасности стороннего ПО и автоматизация проверок. Требования: — Понимание принципов устройства прикладных/серверных web приложений, микросервисной архитектуры. — Умение читать и анализировать различную кодовую базу (Java, JS/TS, Python, C, C++, C#) на предмет уязвимостей и НДВ. — Умение обращаться с базовыми инструментами Application Security (SAST, SCA) и имплементировать в пайплайны. — Умение писать скрипты автоматизации на Bash, PowerShell, Python. — Умение пользоваться отечественными и зарубежными базами данных уязвимостей и угроз ИБ, знание наиболее распространенных уязвимостей ПО. Условия: — Удалённая работа в компании из России.

Проводить анализ безопасности архитектуры, выявлять угрозы и уязвимости, связанные с использованием AI-агентов/LLM/GenAI во внутренних и внешних продуктах компании. Разрабатывать требования безопасной разработки в сфере использования AI-агентов/LLM/GenAI.

Анализ безопасности программного обеспечения, создаваемого не техническими специалистами. - Гражданство и локация РФ.

Location: Москва В Центре Робототехники Сбера мы занимаемся созданием универсального воплощенного ИИ для роботов, который способен управлять разнообразными физическими воплощениями. Кроме этого, одним из ключевых направлений нашей работы является разработка антропоморфного робота общего назначения, не безызвестного Грина. Обязанности 1. разработка, внедрение и сопровождение автоматизированных механизмов обеспечения безопасности программного обеспечения на этапах разработки, сборки и поставки. 2. интеграция и сопровождение инструментов анализа безопасности исходного кода, программных зависимостей, контейнерных образов и секретов в процессах CI/CD 3. разработка и реализация мер защиты цепочки поставки программного обеспечения (Software Supply Chain Security), включая контроль зависимостей, SBOM, происхождения и целостности программных артефактов 4. анализ безопасности конфигураций, контейнеризированных приложений и процессов развёртывания, формирование технических требований безопасности к инфраструктуре разработки и поставки ПО 5. разработка и сопровождение технических механизмов Security Quality Gates, автоматизация сбора и обработки результатов проверок безопасности 6. участие в анализе результатов автоматизированных проверок, техническом триаже уязвимостей и других смежных задачах Application Security 7. Разработка вспомогательных инструментов и интеграций, консультирование команд разработки по вопросам безопасности CI/CD и подготовка технической документации. Требования 1. практический опыт работы в DevSecOps, DevOps, Security Engineering или автоматизации процессов обеспечения безопасности программного обеспечения 2. опыт разработки и сопровождения CI/CD-процессов, предпочтительно с использованием GitLab CI/CD, понимание принципов безопасной организации процессов сборки и поставки ПО 3. знание Linux, Docker, Kubernetes, понимание архитектуры контейнерных приложений, механизмов разграничения доступа, сетевого взаимодействия и управления секретами 4. понимание принципов Infrastructure as Code, GitOps и облачных технологий, опыт работы или анализа конфигураций Terraform, Argo CD и облачных платформ 5. опыт интеграции и сопровождения инструментов анализа безопасности в CI/CD, понимание принципов SAST, SCA, Secret Scanning, Container Scanning и IaC Scanning 6. знание основных принципов Software Supply Chain Security, управления зависимостями, формирования SBOM и обеспечения целостности программных артефактов 7. Навыки программирования и автоматизации (Python, Bash или аналогичные), понимание основных классов уязвимостей приложений и способность участвовать в анализе результатов проверок безопасности. Условия * офисный/гибридный формат в Москве (Автозаводская 23а к2) * ежегодный пересмотр зарплаты и годовая премия * расширенный ДМС и льготное страхование для семьи * уникальная система обучения Сбера для профессионального и карьерного развития * выгодная ипотека для сотрудников * подписка Прайм с возможностью совместного использования на трёх близких * вознаграждение за рекомендацию друзей в команду Сбера * корпоративная пенсионная программа.

Location: Москва В Центре Робототехники Сбера мы занимаемся созданием универсального воплощенного ИИ для роботов, который способен управлять разнообразными физическими воплощениями. Кроме этого, одним из ключевых направлений нашей работы является разработка антропоморфного робота общего назначения, не безызвестного Грина. Обязанности 1. проведение анализа защищённости программных продуктов, включая анализ исходного кода (Security Code Review), результатов SAST, SCA и других автоматизированных проверок безопасности 2. проведение технического триажа уязвимостей, подтверждение возможности эксплуатации, оценка критичности и подготовка рекомендаций по устранению 3. сопровождение процесса управления уязвимостями приложений (Vulnerability Management), включая регистрацию, приоритизацию, контроль устранения и повторные проверки 4. проведение практических проверок безопасности веб-приложений, API, механизмов аутентификации, авторизации и бизнес-логики приложений 5. взаимодействие с командами разработки, консультирование по вопросам безопасной реализации программного обеспечения и устранения выявленных уязвимостей 6. разработка вспомогательных скриптов, автоматизация типовых проверок безопасности и участие в совершенствовании процессов безопасной разработки 7. участие в смежных задачах Application Security, подготовке технической документации, рекомендаций и материалов для разработчиков. Требования 1. практический опыт работы в Application Security, анализе защищённости приложений или тестировании на проникновение 2. хорошее понимание распространённых классов уязвимостей программного обеспечения, способов их выявления и эксплуатации (OWASP Top 10, OWASP API Security Top 10, CWE) 3. навыки чтения и анализа исходного кода на JavaScript/TypeScript (в том числе Node.js), Python и Go для выявления потенциальных уязвимостей 4. опыт работы с инструментами SAST, SCA и динамического тестирования приложений, понимание принципов их работы и методов анализа результатов 5. практические навыки проверки безопасности веб-приложений и API, включая механизмы аутентификации, авторизации и обработки пользовательского ввода 6. понимание процессов разработки ПО, принципов SSDLC, опыт работы с Git, продвинутые знания Linux, контейнеризации и CI/CD 7. базовые навыки программирования и написания скриптов для автоматизации задач, умение анализировать технические проблемы и взаимодействовать с командами разработки. Условия * офисный/гибридный формат в Москве (Автозаводская 23а к2) * ежегодный пересмотр зарплаты и годовая премия * расширенный ДМС и льготное страхование для семьи * уникальная система обучения Сбера для профессионального и карьерного развития * выгодная ипотека для сотрудников * подписка Прайм с возможностью совместного использования на трёх близких * вознаграждение за рекомендацию друзей в команду Сбера * корпоративная пенсионная программа.

Мы ищем стажера, который разбирается в уязвимостях и их эксплуатации и хочет развиваться в тестировании безопасности продуктов вместе с нашей командой. Участвовать в анализе безопасности продуктов на всех стадиях жизненного цикла и в формировании оценки безопасности;

Location: Bangalore, India GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As an Intermediate Backend Engineer on GitLab's Security Factory: Code Scanning team, you'll help developers find and fix security issues in their code by contributing to the static analysis engine that finds them. Your work spans both the engine and the tools we use to evaluate it. You'll extend how the engine models programs, from parsing source code and resolving symbols to building call graphs and tracking tainted data across files and languages. You'll also build and apply tooling to test its findings against benchmark applications with known vulnerabilities, measuring both false positives and missed vulnerabilities. We build the engine with artificial intelligence (AI) agents that write and review code from written specifications, under human direction. You'll implement component specifications within the team's architecture, working with engineers and AI agents. Good judgment about when to trust agent output, and when to bring it to human review, is central to the role. What you'll do Extend the program model, including parsing, symbol resolution, intermediate representations, call graphs, and taint and data-flow analysis, to support new languages and frameworks. Build and apply AI-assisted tooling to implement, review, and validate engine changes and findings, in collaboration with the team's technical leadership. Measure detection quality against known vulnerabilities, judging changes primarily on false positive and false negative rates. Develop static application security testing (SAST) rules mapped to Common Weakness Enumeration (CWE) and the Open Worldwide Application Security Project (OWASP), along with test fixtures that demonstrate they work. Implement component specifications with engineers and AI agents through phased plans and small, reviewable changes. Keep specifications and code in sync. Improve the harness, agent instructions, and skills that keep agent-written code trustworthy. Use separate coding and reviewing agents, performance checks, application programming interface (API) checks, and dependency checks, and escalate risky changes to human review. Solve technical problems of moderate scope and complexity, and identify and address technical debt that slows the team down. Write maintainable code that meets our internal standards, and help maintain those standards through code review. Participate in on-call rotations to help troubleshoot product operations, security operations, and urgent engineering issues. Take part in on-call or operational support where your team’s ownership model requires it. What you'll bring Experience using AI or large language model (LLM) tools to generate or evaluate technical content, with the judgment to assess when their output is trustworthy. Solid professional experience writing and testing production code in a systems language, particularly Rust or Go. Our engine is written in Rust, the analyzer wrapper in Go, and the monolith integration in Ruby. You'll be willing to work across them. An interest in static analysis and application security, including parsing, intermediate representations, taint and data-flow analysis, and how vulnerabilities arise in code. Deep expertise isn't required; we'll help you grow it. Organize and progress your work independently in a remote, largely asynchronous environment. The ability to communicate technical problems clearly and concisely and propose iterative solutions. Helpful but not required: experience with performance optimization, Docker and continuous integration and continuous delivery (CI/CD), web or mobile frameworks, guardrails for agent-written code such as mutation testing and fuzzing, or program analysis and security research through publications or open source contributions. Willingness to learn performance optimization and containerized workflows is also welcome. About the team The Security Factory: Code Scanning team develops GitLab's SAST capabilities for customer software repositories. We work closely with the Code Security team on scanning rules and flows, with Composition Analysis on the broader software supply chain, and with other groups across the Sec section. We rely heavily on asynchronous work across time zones. At GitLab, our mission is simple: to enable everyone to contribute to and co-create the software that powers our world. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Remote, United States GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Manager, Customer Success Managers , you will lead a North America-based team that helps customers realize value from GitLab through strong adoption, measurable outcomes, and trusted partnership. You will partner closely with both executive sponsors and day-to-day end users/practitioners to drive adoption and measurable outcomes. Reporting to the Director of Customer Success Managers , you will coach Customer Success Managers to support account health across onboarding, adoption stages, executive business reviews, and renewals, while also improving how the team works. This is a people leadership role with broad scope: you will develop talent, strengthen customer relationships, and partner across Sales, Product, Engineering, and other teams so customers are supported through growth, change, and escalation. What you'll do Lead a team of Customer Success Managers focused on customer adoption, account health, customer satisfaction, and advocacy. Coach team members through regular feedback, development support, and career growth conversations to strengthen knowledge, communication, and execution. Partner with the Director of Customer Success Managers to define team goals, clarify responsibilities, and align priorities with company direction. Manage resource assignments, staffing levels, and hiring activity to support team coverage and customer needs. Develop senior-level relationships with customers and support the team in building trusted advisor partnerships. Collaborate with Sales, Product Management, Engineering, Professional Services, and other internal teams to create a consistent customer experience. Support customers during escalations by working with other leaders to coordinate clear, effective responses. Improve the processes and tools used by the team and oversee initiatives tied to objectives and key results. What you'll bring Experience leading customer-facing teams in software, technology, consulting, sales, or customer success environments. Ability to guide teams that drive software adoption and manage customer relationships across onboarding, adoption, business reviews, and renewals. Knowledge of software development lifecycle practices, related tools, and agile or DevOps ways of working. Familiarity with cloud or container technologies such as Kubernetes and Docker, application security concepts such as static application security testing (SAST) and dynamic application security testing (DAST), or cloud platforms such as Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure. Skill in translating strategy into clear initiatives, coordinating execution, and tracking delivery across competing priorities. Capability to lead distributed teams across regions, cultures, and lines of business, while working effectively with senior executives and external stakeholders. Willingness to travel occasionally for customer meetings and team events, as needed. Strength in communication, coaching, feedback, delegation, planning, and process improvement. Warmth and care in your leadership approach—able to coach with empathy and build trust on a human level. Interest in candidates with transferable experience who can connect technical concepts to business value and collaborate well across functions. About the team On the Customer Success Management team, we are accountable for customer adoption, measurable outcomes, customer satisfaction, and building customer advocacy across GitLab. We also act as a key connection point between customers and the broader GitLab ecosystem, helping streamline collaboration with Product Management, Engineering, Sales, Professional Services, and other partners. In this role, you will manage a team in North America while collaborating asynchronously with stakeholders across regions, with a focus on helping customers succeed at scale and improving how the organization supports them. How GitLab Supports Full-Time Employees Benefits to support your health, finances, and well-being Flexible Paid Time Off Team Member Resource Groups Equity Compensation & Employee Stock Purchase Plan Growth and Development Fund Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law . If you have a disability or special need that requires accommodation , please let us know during the recruiting process .

Location: Hong Kong SAR; Kuala Lumpur, Malaysia About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Job responsibilities: Participate in project requirements and technical reviews, develop test plans, write test cases and test code, and control project risks and quality. Deeply involved in black box and SAST white-box testing of the project, including functional testing, performance automation, stability testing, interface testing, etc. Carry out the process quality management of the project, control the admission standards of each link in the R & D process, such as the QA standards submitted for R & D and the testing standards. Sort out the quality and efficiency issues encountered during the project R & D process, including but not limited to related issues such as R & D, testing, and launch, provide analysis of the reasons, and assist in proposing solutions. Qualifications: Majors related to computer science, software engineering, information and computing science, etc., with a solid foundation in computer knowledge. Familiar with at least one programming language, such as Python, Java, C++, Golang, etc., with certain programming practice experience, able to understand and write basic code logic and algorithms. Have a strong interest in software testing work, understand the basic concepts, processes, and methods of software testing, and have the ability to quickly learn and master new knowledge and skills. Possess good problem analysis and problem-solving skills, be able to actively think and explore solutions when encountering problems, have a strong sense of responsibility and teamwork spirit, and be able to work closely with team members to complete work tasks together. Possessing a good learning attitude and self-motivation, being able to actively adapt to changes in the work environment and task requirements, being brave enough to accept challenges, and constantly improving their professional skills and comprehensive quality in practice. Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.