Engineering Manager, Software Supply Chain Security (SSCS)

About GitLab and Role Overview

GitLab is a leading intelligent orchestration platform for DevSecOps that empowers organizations to boost developer productivity, streamline operations, reduce risks related to security and compliance, and expedite digital transformation. Trusted by over 50 million users globally and the majority of Fortune 100 companies, GitLab fosters an innovative work culture centered on AI-driven efficiency and collaborative growth.

This Engineering Manager role is a foundational leadership position within the Software Supply Chain Security (SSCS) Add-On engineering team. The focus is on driving the development of critical capabilities such as Dependency Firewall, Build Provenance, Malicious Package detection, and Artifact Signing. You will collaborate closely with senior engineering and product leadership to deliver enterprise-grade, secure software solutions for clients in regulated industries.

Key Responsibilities

• Lead and mentor a backend engineering team working on the SSCS Add-On, focusing on security and supply chain capabilities.
• Direct engineering efforts to achieve product milestones, aligning scope and dependencies alongside staff engineers and product managers.
• Partner with Talent Acquisition for recruitment activities, including designing interviews and participating in hiring decisions.
• Conduct regular one-on-one meetings, performance evaluations, and career development sessions to foster team growth.
• Maintain engineering quality by tracking delivery metrics such as cycle times, defect rates, and test coverage, and proactively manage risks.
• Coordinate quarterly planning and roadmap prioritization with stage leadership and product teams.
• Collaborate with finance and other departments on workforce planning and scaling the engineering team.
• Represent the SSCS engineering team in broader stage leadership communications and promote cross-functional collaboration.

Required Qualifications and Skills

• Minimum of 3 years managing backend engineering teams in security, DevOps, or platform engineering contexts.
• Expertise in hiring and growing distributed backend or security engineers, including knowledge of the talent market.
• Strong technical understanding including architecture discussions around package registries, CI/CD security, and signing infrastructure.
• Proven ability to manage predictable delivery against multi-quarter product roadmaps and coordinate across teams.
• Experience in asynchronous and documentation-based work environments, with excellent written communication skills.
• Keen familiarity with software supply chain security, artifact management, compliance products, or related fields.
• Working knowledge of security frameworks and ecosystems such as SLSA and Sigstore.
• Ability to build strong credibility and relationships with engineers, product teams, and stakeholders through sound judgment and coaching.

Team and Work Environment

The SSCS Add-On team is a globally distributed product engineering group focused on delivering supply chain security features in highly regulated settings. Reporting to the SSCS Senior Engineering Manager and collaborating with staff engineers and product managers, the team operates asynchronously with clear processes to accomplish high-quality delivery and maintain team health.

Employee Benefits

• Comprehensive health, financial, and wellness benefits.
• Flexible Paid Time Off policies.
• Access to Team Member Resource Groups for community and support.
• Equity compensation and opportunities through Employee Stock Purchase Plans.
• Funding and support for growth and professional development.
• Parental leave policies.

Application Notes

Applicants with varying levels of experience are encouraged to apply even if they do not meet every requirement. GitLab promotes equal opportunity and affirmative action, maintaining an inclusive work environment free from discrimination and harassment. Accommodations for disabilities or special needs can be requested during recruitment.

Location-related eligibility queries can be addressed during the recruiting process.