[Hiring] Senior Security Technical Program Manager, Fraud & Abuse @GitLab

Role Description

You will join the Trust and Safety team, within the security division at GitLab. Your role will be coordinating and owning cross functional fraud and abuse prevention workstreams for trust and safety. This role will focus on coordinating with T&S engineers to understand fraud and abuse trends and work cross functionally with Engineering, Product and other peer teams to improve defenses. A successful person in this role is able to understand technical requirements and problems and convert them into business requirements and coordinate with engineering and product teams to implement improved defenses.

What you’ll do

• Be the connection between T&S, Engineering, Product, Legal, Finance and other teams to build, track, and drive cross functional fraud and abuse mitigation through to completion.
• Turn abuse and fraud trends into proposed defense measures and work with stakeholders to gain buy-in, and drive projects to completion through cross functional leadership.
• Have an ownership mindset and bias for action to keep GitLab secure.
• Turn abuse trends into prioritized, cost-quantified requirements and business cases that product teams can act on.
• Leverage AI to build early identification and triage of fraud and abuse risks across GitLab.
• Partner with Finance and Billing on fraud prevention controls, including payment fraud, chargebacks, and account verification.
• Define metrics for abuse and fraud exposure, and report program status, costs, and outcomes to security and business leadership.
• Identify, triage and prioritize Safety & Trust abuse campaigns and operational work and ensure high-impact incidents are escalated.

Qualifications

• 5+ years in technical program management, security program management, or trust & safety, fraud, or risk operations, including hands-on experience with fraud or abuse at a SaaS, platform, marketplace, or payments company.
• A track record of driving cross-functional fixes to completion without direct authority over the teams doing the work.
• Working knowledge of common fraud and abuse patterns, such as account takeover, free-tier and trial abuse, payment fraud and card testing, bot signups, and spam and phishing.
• Technical fluency with web applications, APIs, identity and authentication, and billing or subscription systems, enough to discuss implementation tradeoffs with engineers.
• Clear, concise written communication suited to an all-remote, asynchronous environment.
• Sound judgment balancing fraud and abuse risk against friction for legitimate users and customers.

Benefits

• Flexible Paid Time Off
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental Leave