• Help structure engineering workstreams and ensure projects move forward efficiently • Identify risks, unblock engineers, and maintain steady development velocity • Ensure high engineering standards while keeping teams focused on shipping • Translate product direction and technical strategy into clear engineering execution • Contribute to key architecture discussions and technical decisions • Support engineers in evaluating system design choices and implementation trade-offs • Ensure systems are implemented in a scalable and maintainable way • Build and scale a strong engineering team across China, US and Europe • Recruit high-quality engineers and help maintain a strong hiring bar • Establish structured hiring processes and interview standards • Work closely with product, research, and leadership teams • Ensure alignment across different engineering efforts and locations • Help resolve technical and organisational bottlenecks

• Help structure engineering workstreams and ensure projects move forward efficiently • Identify risks, unblock engineers, and maintain steady development velocity • Ensure high engineering standards while keeping teams focused on shipping • Translate product direction and technical strategy into clear engineering execution • Contribute to key architecture discussions and technical decisions • Support engineers in evaluating system design choices and implementation trade-offs • Ensure systems are implemented in a scalable and maintainable way • Build and scale a strong engineering team across China, US and Europe. • Recruit high-quality engineers and help maintain a strong hiring bar • Establish structured hiring processes and interview standards • Work closely with product, research, and leadership teams • Ensure alignment across different engineering efforts and locations • Help resolve technical and organisational bottlenecks

• Lead your team of developers, ensuring that they have the information, connections, tools, and attention needed to keep them unblocked and on track to deliver quality solutions • Host daily calls with your team to drive project completion • Prioritize the work for your team, adjusting to new information and requests • Provide input and technical expertise during design and development phases of the SDLC • Triage internal support cases that are escalated to your team, working closely with the Support and Client Experience teams • Provide project updates, trends, and reports to the business • Work with project stakeholders to drive towards timely milestone completion • Validate project scope and set accurate project milestones • Provide program management of major initiatives • Coordinate internal resources and third parties/vendors for assigned projects • Lead development discussions with Business Units, stakeholders, and your team to finalize expected deliverables • Review and edit requirements, specifications, business processes and recommendations related to proposed solution • Analyze impact of issues and solutions to other areas of the company • Ensure issues, bugs, or blockers are identified, tracked, reported and resolved in a timely manner • Identify and communicate required or necessary strategy, project, or solution changes to your development team • Assist in enforcement of project deadlines and schedules • Coordinate the launch of software with supporting teams (e.g. Marketing, Support, Sales), including any required release scheduling, announcements, documentation, training, etc. to ensure the successful adoption of solutions from your team • Ensure enforcement of software engineering quality and compliance standards, and provide evidence to related controls during team audits • Collect customer and stakeholder feedback, and stay up to date on related industry solutions, to help inform your platform roadmap and keep your solutions competitive

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description As an Engineering Manager for Composition Analysis, you'll lead a team building the software composition analysis capabilities that help GitLab customers find and fix vulnerabilities in their application dependencies and software supply chain. You'll guide engineers working on software composition analysis and container scanning, and you'll be responsible for setting priorities, shaping product architecture, and running agile processes so that our security offerings stay effective, reliable, and easy to use in real DevSecOps environments. You'll balance complex, security-focused roadmaps and author project plans so that customers get a robust composition analysis experience within GitLab. In your first year, you'll drive key initiatives like: - Auto-remediation of vulnerable packages - Auto-fix breaking changes with AI - Scanning unmanaged C/C++ dependencies - Static reachability analysis - Snippet detection for open source dependencies Some examples of our projects: - Building hyper-scale vulnerability detection engines for millions of GitLab users around the world - Designing auto-remediation workflows for vulnerable open source and third-party dependencies - Auto AI fixes for breaking changes that happen following dependency bumps What you’ll do: - Lead engineers across the Composition Analysis team, setting clear priorities and expectations. - Drive key security initiatives, including auto-remediation of vulnerable software packages, scanning unmanaged C/C++ dependencies, static reachability analysis, and snippet detection for open source dependencies. - Balance priorities and resources across the Composition Analysis team to ensure sustainable delivery and high-quality outcomes. - Author and maintain project plans for epics within the Composition Analysis team, aligning work, identifying dependencies, and ensuring quality delivery. - Run agile project management processes for the Composition Analysis team, including planning, estimation, and continuous improvement of delivery practices. - Provide guidance on the architecture of software composition analysis solutions, ensuring they are robust, scalable, and effective. - Collaborate closely with the Composition Analysis team to ensure consistent, high-quality approaches to application security across GitLab's platform. Qualifications - Background leading multiple technical teams or groups, ideally in application security or cloud security - Practical understanding of software composition analysis, including how to assess and manage risks in application dependencies - Familiarity with containerization technologies, package managers, and dependency management systems - Experience working with or around open source security tooling (for example, Syft, Grype, Trivy, or similar tools) - Ability to plan and run agile project management processes for the Composition Analysis team, including coordinating priorities and dependencies. - Skill in guiding product and architecture decisions for security scanning tools, balancing technical constraints with customer needs - Openness to candidates with transferable experience in security engineering, DevSecOps, or vulnerability management who are motivated to grow in application security leadership About the team The Composition Analysis team at GitLab sits within our security product area and focuses on building and improving our software composition analysis capabilities across the DevSecOps platform. We own core features such as software composition analysis, container scanning, and related remediation workflows. You'll lead our distributed group of security-focused engineers as we collaborate asynchronously across time zones using GitLab itself for planning, code review, and delivery. Right now, we're focused on advancing capabilities like: - Auto-remediation of vulnerable packages - Scanning unmanaged C/C++ dependencies - Static reachability analysis at the function level - Snippet detection for open source dependencies Benefits - Flexible Paid Time Off - Team Member Resource Groups - Equity Compensation & Employee Stock Purchase Plan - Growth and Development Fund - Parental leave - Home office support