Senior Product Designer, Policies

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.

The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software.

*Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.

GitLab is seeking a Senior Product Designer to lead design for security policies and compliance workflows, collaborate across product teams, and elevate the quality of our security governance experiences.

About the Role

As a Senior Product Designer for Security, Policies, you'll own the design of policy configuration and compliance workflows that help organizations enforce security standards, meet regulatory requirements, and govern the SDLC. This role focuses on translating complex governance requirements into intuitive, scalable, usable experiences for AppSec professionals, Compliance managers, and Developers.

Your primary focus will be on Security Policies—designing experiences that enable teams to define security rules, configure enforcement mechanisms, manage exceptions, and demonstrate compliance. You'll work within the broader Security & Compliance portfolio, ensuring policy experiences integrate seamlessly with vulnerability management, application security scanners, and remediation workflows. You'll partner closely with your Product Management and Engineering counterparts to deliver cohesive policy experiences that meet user needs.

This role requires strong execution skills and systems thinking. Security policies affect workflows across GitLab—from CI/CD pipelines to merge requests to deployment gates. You'll design experiences that work within GitLab's existing interaction patterns, apply Pajamas Design System standards, and ensure policy workflows feel consistent with the rest of the security platform.

Senior designers deliver excellent craft, collaborate effectively across teams, and contribute to a culture of quality and iteration.

What You’ll Do

• Own design for security policy and compliance experiences – Lead end-to-end design for policy configuration, compliance reporting, and SDLC governance. Deliver usable solutions that solve immediate user problems while maintaining quality and consistency.
• Translate technical complexity into clear experiences – Partner with security experts to understand policy configuration, compliance frameworks, and enforcement logic, then design experiences that make complex governance accessible for different user types—from AppSec professionals configuring detailed rules to developers understanding what's blocking their work.
• Partner cross-functionally – Collaborate with Product Managers, Engineering Managers, and teams across multiple security product groups to shape priorities, scope MVCs, and ensure design quality and intent is maintained through development and implementation. Build strong relationships with counterparts and adjacent teams (vulnerability management, scanners, CI/CD) to align on cohesive experiences and ensure policy experiences connect appropriately.
• Deliver high craft quality – Demonstrate strong interaction design, visual design, and attention to detail. Participate in design reviews, give constructive feedback, and maintain high standards in your own work.
• Contribute to the design system – Actively contribute to Pajamas by identifying reusable patterns, proposing new components, and ensuring your group's work extends and adheres to system standards. Balance leveraging existing system components with recognizing when unique solutions are needed.
• Ground work in research – Conduct usability studies, competitor evaluations, and formative research. Collaborate with UX Research on problem validation and incorporate insights to fulfill user and business needs. Engage with users and the wider GitLab community to understand their needs and work toward long-term solutions.
• Communicate designs clearly – Create wireframes, prototypes, user flows, and high-fidelity designs that clearly communicate your vision. Present your work to stakeholders, articulate your rationale, and build alignment on solutions. Document decisions so others can understand your thinking and exemplify effective asynchronous communication.
• Practice effective iteration – Break down designs to fit the release cadence. Review merge requests with user-facing changes. Advocate for and guide others in adopting effective iteration practices within your group. Mitigate the risk for deferred UX with MVCs and help prioritize usability issues.

What You’ll Bring

• Demonstrated experience designing enterprise-grade security, compliance, or DevSecOps products
• Strong portfolio showing end-to-end product design work, from problem framing through shipped solutions
• Experience designing holistic workflows and translating complex technical concepts into clear, user-centered experiences
• Excellent collaboration skills and experience fostering partnerships across multiple product teams and stakeholders
• Systems thinking and experience contributing to or working with design systems
• Experience conducting research and making strategic decisions about when and how to validate design decisions
• Strong visual design skills with the ability to balance system consistency with custom solutions
• Experience working in remote, distributed teams
• Proficiency with Figma and prototyping tools

About GitLab

GitLab is the most comprehensive AI-powered DevSecOps platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world.

As an all-remote company since day one, we hire globally and support flexible work. We offer competitive compensation, equity, benefits, and unlimited PTO.

For full role responsibilities and expectations, see the Senior Product Designer role description in our handbook.

GitLab is an equal opportunity employer committed to creating an inclusive environment for all employees.

The base salary range for this role’s listed level is currently for residents of the United States only. This range is intended to reflect the role's base salary rate in locations throughout the US. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, alignment with market data, and geographic location. The base salary range does not include any bonuses, equity, or benefits. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.

United States Salary Range

$100,000—$150,000 USD

How GitLab will support you

• Benefits to support your health, finances, and well-being
• Flexible Paid Time Off 
• Team Member Resource Groups
• Equity Compensation & Employee Stock Purchase Plan
• Growth and Development Fund
• Parental leave 
• Home office support

Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.

Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.  

Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.

GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.