Engineering Manager - Grafana Application Security

Details

Grafana Labs is seeking an Engineering Manager to lead its application security engineering team. The role is responsible for developing and implementing security strategies, coordinating with teams across the organization, and improving the security posture of cloud-based SaaS products. The successful candidate will make secure engineering practices easy to adopt through automation, systematic approaches, enablement, and guardrails.

Responsibilities

• Lead the application security team across application security, cloud security, and internal tooling development.
• Lead first- and third-party vulnerability management, including coordinated disclosure with external reporters and embargoed fixes.
• Define, optimize, and implement the engineering strategy in collaboration with security leadership, individual contributors, and business stakeholders.
• Conduct regular one-to-ones, coaching, and mentoring to keep team members motivated, engaged, and effective while maintaining high standards.
• Collaborate with engineering leaders and organizational stakeholders to define and influence product strategy, roadmaps, and designs.
• Engage in significant security incidents, including preparation, simulation, response, and affected-customer notification and communications.
• Contribute to and review design documents for upcoming projects, ensuring projects are well-defined and ready for development.
• Advise on how to break projects down into tasks.
• Review threat models, challenge severity ratings, and contribute to design reviews.

Requirements

• Prior experience running a security engineering team.
• Strong engineering background and the ability to engage in technical conversations and challenge teams to reach strong technical decisions.
• Comfortable working with autonomous engineering teams across technical and product-focused decision-making.
• Current understanding of technical trends and the challenges faced by security engineering teams.
• A DevOps-oriented approach to security, favoring enablement, automation, and guardrails over gates and roadblocks.
• Familiarity with securing and operating public cloud providers, including AWS, GCP, and Azure.
• Familiarity with Kubernetes and securing combined open-source software and SaaS products.
• Excellent written and verbal communication skills, including the ability to explain complex cybersecurity concepts to technical and non-technical audiences and translate security problems into business impact.

Bonus Points

• Programming or software engineering experience before transitioning into security and leadership.
• Working knowledge of Grafana Labs open-source projects and products.
• Experience using observability tooling to solve security problems.
• Experience working with open-source communities.
• Experience securing large-scale distributed systems.

Benefits

• Restricted Stock Units (RSUs).
• 100% remote global culture.
• Career growth pathways.
• In-person onboarding.
• Global annual leave policy of 30 days per year, including three Grafana shutdown days, subject to local legislation.