Intermediate Backend Engineer, SSCS – Supply Chain

Role Overview

• Implement well-scoped backend features across the Add-On's supply chain security product, including package policy integrations, ingestion pipeline improvements, signing and verification support, and reliability-focused work, delivering maintainable code on agreed timelines and meeting team-defined delivery commitments.
• Build and maintain integrations between Add-On functionality and GitLab's existing software composition analysis scanning infrastructure so findings appear consistently and accurately in merge request security reports, reducing integration issues and supporting a reliable user experience.
• Write and maintain comprehensive automated test coverage, including RSpec and integration tests, to improve test reliability, reduce regressions, and support safe, consistent releases as the codebase grows.
• Take on work across multiple feature areas as priorities evolve, contributing as a generalist where the team needs support most.
• Participate actively in code review by giving thoughtful, actionable feedback and incorporating feedback constructively into your own work to help maintain code quality and reduce rework.
• Contribute clear internal documentation for the features and behavior you ship so teammates can support, extend, and troubleshoot the product effectively.
• Coordinate with adjacent Software Supply Chain Security teams, including Dependency Firewall and Malware Database, as the Add-On brings together capabilities from across GitLab, helping deliver aligned functionality and smoother cross-team execution.
• Collaborate effectively in an async-first environment across global time zones, including occasional off-hours overlap when needed, to keep work moving and decisions documented clearly.

Requirements

• Backend development experience with the ability to deliver maintainable production code.
• Solid proficiency in Ruby on Rails and strong PostgreSQL fundamentals.
• Familiarity with Golang, or a willingness to learn and work across both Ruby on Rails and Go.
• Strong testing discipline, including experience with RSpec or an equivalent testing framework.
• Clear, direct written communication skills and experience collaborating with distributed teammates in asynchronous workflows.
• Ability to manage scoped work independently, communicate progress clearly, and adjust as team priorities shift.
• Interest in package ecosystems such as npm, Maven, PyPI, or OCI containers, or adjacent experience that helps you ramp in this domain.
• Interest in software supply chain security, dependency management, DevSecOps, or security-adjacent product development, with the ability to apply security considerations in backend development work.

Tech Stack

• Maven
• Postgres
• RSpec
• Ruby
• Ruby on Rails
• Go

Benefits

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental leave
• Home office support