Engineering Manager - Software Supply Chain Security

GitLab is the intelligent orchestration platform for DevSecOps, trusted by over 50 million registered users and more than 50% of the Fortune 100 to ship secure software faster.

As an Engineering Manager for the Software Supply Chain Security (SSCS) Add-On, you will serve in a founding management role guiding a dedicated backend product engineering team. You will lead the development of enterprise security capabilities—including Dependency Firewall, Build Provenance, Malicious Packages detection, and Artifact Signing. Partnering directly with a Staff Backend Engineer, Product Manager, and SSCS Stage leadership, you will translate strategic product roadmaps into predictable, high-quality releases for enterprise customers operating in highly regulated industries.

Key Responsibilities

• Team Leadership & Development: Recruit, hire, and mentor backend and security engineers in a global, asynchronous environment; conduct regular 1:1s, performance reviews, and career planning sessions.
• Delivery & Execution: Drive engineering milestones for General Availability (GA) releases by aligning scope, sequencing, and cross-team technical dependencies alongside Product Management.
• Engineering Quality & Metrics: Establish and monitor delivery velocity, cycle times, defect rates, and automated test coverage to mitigate technical risks early.
• Roadmap & Capacity Planning: Lead quarterly planning sessions, balance headcount pacing with Finance, and guide roadmap tradeoff discussions within SSCS stage leadership.
• Cross-Functional Collaboration: Partner with Security, Product, Finance, Talent Acquisition, and Customer Success stakeholders to scale the SSCS Add-On SKU predictably.
• AI-Driven Workflows: Embrace and promote AI tools as core productivity multipliers across team members' daily engineering workflows.

Requirements

Experience & Functional Background

• 3+ years of direct experience managing backend product engineering teams in security, DevOps, DevSecOps, or platform engineering environments.
• Proven track record of hiring, growing, and retaining distributed backend/security engineering talent across international time zones.
• Comfort operating in an asynchronous, documentation-first organizational culture with strong written communication skills.
• Experience managing multi-quarter product roadmaps, establishing predictable shipping rhythms, and navigating complex cross-team technical dependencies.

Technical Credibility & Domain Knowledge

• Technical credibility to participate in system architecture discussions around package registries, CI/CD pipeline security, and artifact signing infrastructure.
• Familiarity with supply chain security frameworks and ecosystems, such as SLSA (Supply-chain Levels for Software Artifacts) and Sigstore.
• Background in artifact management, dependency enforcement, or compliance-focused enterprise software products.

Preferred Qualifications

• Prior experience within high-growth B2B SaaS platforms managing security or compliance SKUs.
• Direct familiarity with open-source development workflows and the GitLab product ecosystem.

Total Rewards & Remote Culture

• Remote-First Work: 100% remote working environment across supported hiring countries with flexible paid time off (PTO).
• Financial & Equity Benefits: Equity compensation grants, Employee Stock Purchase Plan (ESPP), 401(k)/pension plans, and dedicated growth and development funds.
• Family & Wellbeing Support: Comprehensive health insurance plans, generous parental leave, and active Team Member Resource Groups (TMRGs).