No Commute

GitLab is seeking a Senior Product Designer to lead design for security policies and compliance workflows, collaborate across product teams, and elevate the quality of our security governance experiences.

About the Role

As a Senior Product Designer for Security, Policies, you'll own the design of policy configuration and compliance workflows that help organizations enforce security standards, meet regulatory requirements, and govern the SDLC. This role focuses on translating complex governance requirements into intuitive, scalable, usable experiences for AppSec professionals, Compliance managers, and Developers.

Your primary focus will be on Security Policies—designing experiences that enable teams to define security rules, configure enforcement mechanisms, manage exceptions, and demonstrate compliance. You'll work within the broader Security & Compliance portfolio, ensuring policy experiences integrate seamlessly with vulnerability management, application security scanners, and remediation workflows. You'll partner closely with your Product Management and Engineering counterparts to deliver cohesive policy experiences that meet user needs.

This role requires strong execution skills and systems thinking. Security policies affect workflows across GitLab—from CI/CD pipelines to merge requests to deployment gates. You'll design experiences that work within GitLab's existing interaction patterns, apply Pajamas Design System standards, and ensure policy workflows feel consistent with the rest of the security platform.

Senior designers deliver excellent craft, collaborate effectively across teams, and contribute to a culture of quality and iteration.

What You’ll Do

• Own design for security policy and compliance experiences – Lead end-to-end design for policy configuration, compliance reporting, and SDLC governance. Deliver usable solutions that solve immediate user problems while maintaining quality and consistency.
• Translate technical complexity into clear experiences – Partner with security experts to understand policy configuration, compliance frameworks, and enforcement logic, then design experiences that make complex governance accessible for different user types—from AppSec professionals configuring detailed rules to developers understanding what's blocking their work.
• Partner cross-functionally – Collaborate with Product Managers, Engineering Managers, and teams across multiple security product groups to shape priorities, scope MVCs, and ensure design quality and intent is maintained through development and implementation. Build strong relationships with counterparts and adjacent teams (vulnerability management, scanners, CI/CD) to align on cohesive experiences and ensure policy experiences connect appropriately.
• Deliver high craft quality – Demonstrate strong interaction design, visual design, and attention to detail. Participate in design reviews, give constructive feedback, and maintain high standards in your own work.
• Contribute to the design system – Actively contribute to Pajamas by identifying reusable patterns, proposing new components, and ensuring your group's work extends and adheres to system standards. Balance leveraging existing system components with recognizing when unique solutions are needed.
• Ground work in research – Conduct usability studies, competitor evaluations, and formative research. Collaborate with UX Research on problem validation and incorporate insights to fulfill user and business needs. Engage with users and the wider GitLab community to understand their needs and work toward long-term solutions.
• Communicate designs clearly – Create wireframes, prototypes, user flows, and high-fidelity designs that clearly communicate your vision. Present your work to stakeholders, articulate your rationale, and build alignment on solutions. Document decisions so others can understand your thinking and exemplify effective asynchronous communication.
• Practice effective iteration – Break down designs to fit the release cadence. Review merge requests with user-facing changes. Advocate for and guide others in adopting effective iteration practices within your group. Mitigate the risk for deferred UX with MVCs and help prioritize usability issues.

What You’ll Bring

• Demonstrated experience designing enterprise-grade security, compliance, or DevSecOps products
• Strong portfolio showing end-to-end product design work, from problem framing through shipped solutions
• Experience designing holistic workflows and translating complex technical concepts into clear, user-centered experiences
• Excellent collaboration skills and experience fostering partnerships across multiple product teams and stakeholders
• Systems thinking and experience contributing to or working with design systems
• Experience conducting research and making strategic decisions about when and how to validate design decisions
• Strong visual design skills with the ability to balance system consistency with custom solutions
• Experience working in remote, distributed teams
• Proficiency with Figma and prototyping tools

About GitLab

GitLab is the most comprehensive AI-powered DevSecOps platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world.

As an all-remote company since day one, we hire globally and support flexible work. We offer competitive compensation, equity, benefits, and unlimited PTO.

For full role responsibilities and expectations, see the Senior Product Designer role description in our handbook.

GitLab is an equal opportunity employer committed to creating an inclusive environment for all employees.