[gitlab-security]

Thank you for your post and questions. We would welcome you to apply for a role at GitLab that looks interesting to you. Our guideline for security researchers is that if you are a GitLab employee, you would not be eligible for a bounty award through our public bug bounty program. Other than that, independent security research is fine, as long as it does not call out our customers in a negative manner. Here is our hiring page: https://about.gitlab.com/jobs/faq/