Release / Build Engineer - GitLab CI, Supply Chain, Multi-Environment Promotion

Mission: Embed security into Primary’s SDLC and validate that browser + backend policies achieve real zero-trust outcomes.

This role supports government customers and requires U.S. citizenship due to regulatory requirements.

Responsibilities

• Threat model browser enforcement points and backend policy control plane.
• Own vulnerability workflow, security testing strategy, and secure design reviews.
• Implement security gates in GitLab CI (SAST/DAST/dependency) with pragmatic policies.
• Support regulated customers’ security requirements and evidence.

Required

• AppSec experience with client/server products.
• Familiarity with secure auth/session patterns, secrets handling, and policy enforcement risks.
• Chromium literacy - must have familiarity with chromium core browser architecture and operation.
• US Citizenship required

Preferred

• Browser security knowledge (sandboxing, isolation, IPC risks), supply chain security, SBOM/provenance.

Compensation is dependent on experience.

Pay: $80,000.00 - $200,000.00 per year

Work Location: Remote