Engineering Manager, Software Supply Chain Security: Pipeline Security
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation.
What this role actually needs.
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. Responsibilities: - Lead a team of engineers building Software Supply Chain Security features with a focus on CI job artifact security. - Guide the design and implementation of SLSA (Supply-chain Levels for Software Artifacts) compliance within GitLab CI/CD pipelines. - Collaborate with Product Managers to define, prioritize, and deliver the roadmap for supply chain security capabilities. - Partner with Security team members to ensure new and existing features meet GitLab’s security standards and align with best practices. - Stay current with software supply chain security standards and tools, including SLSA, SBOM, software composition analysis, and vulnerability management. Translate what you learn into actionable product improvements. - Educate and advocate for supply chain security best practices across engineering teams to drive adoption of secure patterns in CI pipelines. Company context: GitLab is the all-remote DevSecOps platform spanning source code, CI/CD, security, and AI-assisted development.
Day-to-day expectations
Gitlab lists these responsibilities for the Engineering Manager, Software Supply Chain Security: Pipeline Security role.
- Lead a team of engineers building Software Supply Chain Security features with a focus on CI job artifact security.
- Guide the design and implementation of SLSA (Supply-chain Levels for Software Artifacts) compliance within GitLab CI/CD pipelines.
- Collaborate with Product Managers to define, prioritize, and deliver the roadmap for supply chain security capabilities.
- Partner with Security team members to ensure new and existing features meet GitLab’s security standards and align with best practices.
- Stay current with software supply chain security standards and tools, including SLSA, SBOM, software composition analysis, and vulnerability management. Translate what you learn into actionable product improvements.
- Educate and advocate for supply chain security best practices across engineering teams to drive adoption of secure patterns in CI pipelines.
Why this listing is more than a copied job post.
Engineering Manager, Software Supply Chain Security: Pipeline Security is framed against UpJobz source checks, country scope, compensation visibility, and work-authorization signals so candidates can make a faster go/no-go decision.
Canada tech market
Canada roles on UpJobz are filtered for high-tech relevance, source freshness, and actionable employer detail before they are allowed into SEO surfaces.
Compensation read
The employer source does not expose a reliable salary range, so candidates should ask for compensation early instead of waiting until late-stage interviews.
Work authorization read
Current extracted signal: Open to TN, H-1B, and OPT candidates already in the United States. UpJobz treats this as a search signal, not legal advice, and links visa-sensitive roles back to the relevant visa hub where possible.
Location read
Because this is remote, country scope and time-zone expectations matter as much as the title. Confirm the employer's allowed work locations on job-boards.greenhouse.io.
Browse similar jobs
Turn this listing into an application plan.
This is the first pass at the premium UpJobz layer: a fast brief that helps serious applicants move with more clarity.
Next moves
- Tailor your resume around ai and security instead of sending a generic application.
- Use the first two bullets of your application to connect your background directly to engineering manager, software supply chain security: pipeline security is a high-signal remote role in remote (canada), and it is most realistic for open to tn, h-1b, and opt candidates already in the united states.
- Open the role quickly if it fits and bookmark three similar jobs before you leave the page.
Interview themes
Watchouts
- Compensation is hidden, so get range clarity in the first recruiter conversation.
- Use open to tn, h-1b, and opt candidates already in the united states as part of your positioning so the recruiter does not have to infer it.
- Lead with distributed collaboration, async delivery, and timezone discipline.
Keywords to match against your background
Use these terms to decide whether your resume, portfolio, and recent projects line up with the role.
Apply through the employer source
Open the source listing from job-boards.greenhouse.io, confirm the role is still active, then apply on the employer or ATS page.
Source: job-boards.greenhouse.io · Source ID: 8339221002 · Confidence: 90/100 · Last checked: May 7, 2026
How UpJobz verifies job sourcesContinue browsing tech jobs