Detect and respond to security incidents across GitLab’s 24/7 global rotation, managing events from detection through recovery. Maintain incident response runbooks, conduct root-cause and lessons-learned reviews, automate security processes, improve detection capabilities, investigate cloud threats and infected hosts, and collaborate across teams on security projects and tooling.