Senior Software Engineer in Test, Secure

GitLab


1 month ago

02/12/2020 10:22:39

Job type: Full-time

Category: Software Development


This Software Engineer in Test position for our Secure team is 100% remote.

A brief overview:

GitLab is building an open-source, single application for the entire software development lifecycle—from project planning and source code management to CI/CD, monitoring, and security.

Right now, we’re in a period of growth, we’ve more than doubled the size of the Quality department through 2019, and we’ve increased the number of GitLab employees from 400 to over 1100 this financial year, too.

At GitLab, we live and breathe open source principles. This means our entire handbook is online, and with a few clicks, you can find the details of future releases, check out our past releases, and see an overview of the product vision you’d contribute to when working here.

As a Software Engineer in Test at GitLab, you will be embedded in our Secure stage group. You’ll be responsible for baking in a culture of quality across the categories found within our Secure team, expanding on our existing test automation frameworks and test coverage across a range of configurations, and leading our test automation efforts on new features within our Secure categories as part of a dedicated cross-functional team.

What you can expect in a Software Engineering in Test, Secure role at GitLab:
  • As part of our Secure team you’ll work on test automation issues related to the Quality department, the Secure stage group, and the entire GitLab product. The work you’ll do will be transparent and open to the GitLab community.
  • You’ll develop new tests and tools for our GitLab.com frontend, backend APIs and services, and low-level systems like geo-replication, CI/CD, and load balancing.
  • You’ll identify and drive the adoption of best practices in code health, testing, testability, and maintainability.
  • You’ll work with engineers to define and implement mechanisms to inject testing earlier into the software development process.
  • You’ll configure automated tests to execute reliably and efficiently in our CI/CD environments.
  • You’ll work 1:1 with a Product Manager, and with the wider product and development teams to understand how new features should be tested and to contribute to automated tests for these new features.
  • You’ll work in an environment where we aim to have a 1:10 ratio of Software Engineer in Test to Engineers.
  • As an SET, you'll have the opportunity to become and expert in security testing-related techniques and concerns.
Projects you might work on in our Secure stage group:

You’ll spend your time collaborating with a cross-functional team who are embedded in our Secure stage group. You could work on projects where you’ll be tasked with moving our security products from their own standalone QA process to the GitLab QA review application, growing our test coverage across our security products, and implementing security testing processes.

You should apply if:
  • You’ve got at least a few years of experience developing in Ruby or working on a Ruby on Rails application.
  • You’ve got some experience with security testing or an interest in the security field. To demonstrate this, you could be familiar with SQL injections, cross-site scripting, or URL manipulation. Alternatively, you may have been involved in OWASP or security hacking sessions. This list is by no means exhaustative, it's here to give you an insight into the type of securty-testing experience we can look for.
  • You’ve got a working knowledge of Docker.
  • You’ve worked with industry-standard CI tools like GitLab CI, Jenkins, Bamboo, or Circle CI for example.
  • You’re comfortable with Selenium-based test automation tools like Capybara.
  • You’ve got experience with Git and its command line.
  • You’re interested in growing your knowledge and skills in Test Environment Provisioning and Configuring (Terraform, Ansible, Kubernetes, GCP / AWS).
  • You know about clean code and the test pyramid, and champion these concepts.
  • Our values of collaboration, results, efficiency, diversity, iteration, and transparency resonate with you.
  • You'll thrive in an environment where self-learning and self-service is encouraged and instilled as a part of our culture.

We're aware the confidence gap exists so we want to encourage you to apply even if you do not match all of the requirements exactly. The above list is intended to show the kinds of experience and qualities we're looking for. It is not a complete list of pre-required skills.

The culture here at GitLab is something we’re incredibly proud of. Because GitLabbers are currently located in over 51 different countries, you’ll spend your time collaborating with kind, talented, and motivated colleagues from across the globe.

Some of the benefits you’ll be entitled to vary by the region or country you’re in. However, all GitLabbers are fully remote and receive a "no ask, must tell" paid-time-off policy, where we don’t count the number of days you take off annually. You can work incredibly flexible hours, enabled by our asynchronous approach to communication. We’ll also help you set up your home office environment, pay for your membership to a co-working space and contribute to the travel costs associated with meeting other GitLab team members across the world. Also, every year or so, we’ll invite you to our Contribute event.

Hiring Process and compensation:

Our hiring process for this Software Engineer in Test position typically follows six stages. The details of this process and the compensation for this role can be found at the bottom of our job family page.

Remote-EMEA

Please mention that you come from Remotive when applying for this job.

Help us maintain Remotive! If this link is broken, please just click to report dead link!

similar jobs

  • Thorn (US only - East Coast Preferred)
    1 week ago

    Thorn is a non-profit focused on building technology to defend children from sexual abuse. Working at Thorn gives you the opportunity to apply your skills, expertise and passions to directly impact the lives of vulnerable and abused children. Our staff solves dynamic, quickly evolving problems with our network of partners from tech companies, NGOs, and law enforcement agencies. If you are able to bring clarity to complexity and lightness to heavy problems, you could be a great fit for our team.

    Earlier this year, we took the stage at TED and shared our audacious goal of eliminating child sexual abuse material from the internet. A key aspect of our work is partnering with the National Center for Missing & Exploited Children and building technology to optimize the broader ecosystem combating online child sexual abuse.

    What You'll Do

    • Collaborate with other engineers on your team to build a data pipeline and client application from end-to-end.

    • Prototype, implement, test, deploy, and maintain stable data engineering solutions.

    • Work closely with the product manager and engineers to define product requirements.

    • Present possible technical solutions to various stakeholders, clearly explaining your decisions and how they address real user needs, incorporating feedback in subsequent iterations.

    Skills We're Seeking

    • You have a commitment to putting the children we serve at the center of everything you do.

    • You have proficient software development knowledge, with experience building, growing, maintaining a variety of products, and a love for creating elegant applications using modern technologies.

    • You’re experienced with devops (Docker, AWS, microservices) and can launch and maintain new services.

    • You are experienced with distributed data storage systems/formats such as MemSQL, Snowflake, Redshift, Druid, Cassandra, Parquet, etc.

    • You have worked with real-time systems using various open source technologies like Spark, MapReduce, NoSQL, Hive, etc.

    • You have knowledge in data modeling, data access, and data storage techniques for big data platforms.

    • You have an ability and interest in learning new technologies quickly.

    • You can work with shifting requirements and collaborate with internal and external stakeholders.

    • You have experience prototyping, implementing, testing, and deploying code to production.

    • You have a passion for product engineering and an aptitude to work in a collaborative environment, can demonstrate empathy and strong advocacy for our users, while balancing the vision and constraints of engineering.

    • You communicate clearly, efficiently, and thoughtfully. We’re a highly-distributed team, so written communication is crucial, from Slack to pull requests to code reviews.

    Technologies We Use

    You should have experience with at least a few of these, and a desire and ability to learn the rest.

    • Python

    • Elasticsearch / PostgreSQL

    • AWS / Terraform

    • Docker / Kubernetes

    • Node / Typescript

  • 4 days ago
    New Context is a rapidly growing consulting company in the heart of downtown San Francisco. We specialize in Lean Security: a methodology to consistently apply DevSecOps strategies, leading organizations to build better, safer software through hands-on technical and management consulting. . We are a group of engineers who live and breathe Agile Infrastructure, Systems Automation, Cloud Orchestration, and Information & Application Security.

    We are seeking a Managed Services Engineer to work remotely as part of a team supporting services for our MSP clients. Support duties include break/fix work, scaling and capacity planning, and participating in a scheduled on-call rotation.

    Expect to heavily use Open Source software to take on challenges like delivery of highly secured containers, management of IoT devices or supporting Big Data ecosystems at petabyte scale and beyond. You will utilize our core methodologies - Agile, Lean, TDD and Pair Programming - along with your fluency in DevOps - to run robust and reliable systems for our clients. 

    We foster a tight-knit, highly-supportive environment where there are no stupid questions. Even if you do not know the answer immediately, you'll have the entire company supporting you via Slack, Zoom, or in-person. We also host a daily, all-company stand-up via Zoom, and a weekly company Retro, so you won't just be a name on an email. 

    At New Context, our core values are Humility, Accountability, Integrity, Empathy, Creativity, Transparency, Quality & Passion! Our employees live these values every single day.

    Who You Are:
    • Engineer with 2-4 years of IT Experience (Desktop Support, Systems Engineering, Systems Administration);
    • Comfortable with at least one high-level language, ideally Ruby and/or Python (but could be anything); 
    • Experienced in Open Source web technologies, especially Docker, Kubernetes, GitLab, and/or the HashiCorp suite;
    • An excellent communicator, able to deliver project status and explain technical elements to non-technical audiences;
    • Able to think on your feet and learn quickly on-the-job in order to meet the expectations of our clients;
    • A great teammate and a creative and independent thinker.
    Bonus points if you are:
    • Experienced with in-depth AWS administration;
    • Experienced and effective working with external clients and customers;
    • A believer in automated tests and their role in software engineering;
    • Able to translate complex concepts to business customers
    We tailor solutions to our customers. You might support any of the following technologies:
    • Automation: HashiCorp Product Suite (Terraform, Packer, Vault, Consul, Vagrant), Chef, Puppet, Ansible, Salt, Automated Testing
    • Containerization Ecosystem: Kubernetes, Docker, D2IQ, Nomad, Rancher, CoreOS 
    • Cloud & Virtualization: AWS, GCP, Azure, OpenStack, Cloudstack, kvm, libvirt
    • Tools: GitLab, Jenkins, Atlassian Suite, Pivotal Tracker, Git, 
    • Monitoring: SysDig, Tistlock, Datadog, AppDynamics, New Relic, Sentry, Nagios, Prometheus
    • Databases/Datastores: Cassandra, Hadoop, Redis, PostgreSQL, MySQL
    • Security: Compliance Automation, Application Security, Firewalls, OSSEC, AuthN and AuthZ
    • Languages: Ruby, Python, Go, JavaScript
    We are committed to equal-employment principles, and we recognize the value of committed employees who feel they are being treated in an equitable and professional manner. We are passionate about finding ways to attract, develop and retain the talent and unique viewpoints needed to meet business objectives, and to recruit and employ highly qualified individuals representing the diverse communities in which we live, because we believe that this diversity results in conversations which stimulate new and innovative ideas.

    Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
  • productboard (Europe only)
    6 days ago

    Join one of our product teams and develop features with real value to a one-of-a-kind product management system used by 2000+ global companies. Join a team that's redefining what product management systems can be. 

    Our Tech Stack

    productboard's stack is a Ruby on Rails backend built by passionate Rubyists with React.js on Typescript on the frontend. Over time with demand, we've added new technologies to support the growing needs of the team, both in complexity and traffic. We're running Elasticsearch to power our Insights search, we are fully migrated to Kubernetes on AWS to enable an event-driven service architecture, we're using Kafka to let services communicate together asynchronously and resiliently.

    We are also exploring to use Typescript more and more on the backend as well. However, we don't see our Ruby development slowing down anytime soon.

    You'll be expected to work on everything from the above, but we're not expecting deep knowledge in all of it. We strive to build up everything backed by code and reliable pipelines which will get you on track at lightning speed. We're always open to changes that can make us better!

    We work in small cross-functional teams that usually consist of 3 developers, a designer, and a product manager. You’ll be part of the whole feature development lifecycle. You’ll see all the feedback we collected from our customers and you will be encouraged to come up with your ideas or objections.

    About you

    As a core member of our team, you care about solving real problems for real users. Coding, to you, is more art than mechanics and analytical thinking comes second nature.

    You like communicating with frontend or product management and you always keep the end-user in mind. 

    • 2+ years of experience building backend systems

    • Experience with some parts of our tech stack is always welcome (messaging, AWS, k8s, Typescript, SPAs)
    • Your code is clean and well tested, you own development from discovery to production deployment

    • You love to learn and constantly improve your own skills and are not afraid to jump into new things
    • You could win a debate on tabs vs. spaces conducted entirely in English (we have an international team and are successful at keeping discussions in English)

    • You live in Europe – as it's important for us to have the team in pretty much the same timezone

    Remote

    At productboard, we recently started building fully remote teams. It is, therefore, possible to join us as an engineer while being (almost) 100% remote. The expectation is that you will travel to Prague roughly every six weeks to collaborate with your remote team members in person, while also meeting other team members and learning more about the productboard culture. If you're interested in taking on this position remotely, make sure you tick off (most of) these requirements:

    • You’re self-organized and disciplined
    • You have amazing communication skills
    • You know how to make sure everyone on the team feels included
    • Nice to have: previous experience with remote work

    About productboard 

    productboard is the product management system of choice for everyone from Avast and Microsoft to rising stars like Metromile and Envoy. In addition to our recent $45M Series-B, Forbes Magazine named productboard 2019's most valued startup of the Czech Republic. 

    • We are backed by top Silicon Valley investors, giving us access to capital, networks, mentors, and markets
    • You’ll enjoy an exciting team atmosphere building a new and complex product
    • We iterate quickly and decisions are fast. You’ll have a voice in what we do and see the impact of your work
    • We have modern offices in Prague and San Francisco. Expect occasional travel to the US

    Perks & Benefits

    You'll join a diverse and talented team, with plenty of opportunities for personal growth, impact, and learning.

    Stock options
    MacBook Pro or notebook of your choice + 34″ monitor
    Budget for online courses, books and conferences
    5 weeks of vacation and sick days
    Free snacks, drinks, and yummy catered lunches every day 
    MultiSport card to access sports facilities in Prague.
    Team events, such as happy hours, off-sites, and retreats
    Flexible working hours and home office
    Language lessons
    Opportunity to travel to San Francisco
    Compensation for travels and co-working spaces 

    Culture

    Our culture is one of trust and openness, free of workplace politics, and hasty decisions.

    Thoughtful and transparent collaboration is a value that's integral to our founding principles. For us, success is a team sport, so it's important you're a team player. 

Remotive can help!

Not sure how to apply properly to this job? Watch our live webinar « 3 Mistakes to Avoid When Looking For A Remote Startup Job (And What To Do Instead) ».

Interested to chat with Remote workers? Join our community!