Senior Software Engineer, Security Assurance

Details

Grafana Labs is looking for a Senior Software Engineer, Security Assurance to join its GRC engineering team. The team is building an automated, data-driven security system with defense-in-depth and self-healing capabilities for a highly autonomous, remote-first, cloud-native organization.

The role focuses on building security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend systems, provide visibility into security posture, and give engineers and stakeholders secure guardrails and paved roads. The role is hands-on software engineering and involves collaboration across the security department and the wider organization.

Responsibilities

• Contribute technically to the GRC team across certifications, application security, build security, cloud security, supply chain security, and internal security tooling development.
• Develop, implement, and maintain highly automated security assurance programs to support organizational and regulatory compliance, including ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, and TISAX.
• Develop systems, automations, and methods for security observability.
• Deploy security and compliance checks through developer-friendly guardrails and paved roads in daily workflows and build pipelines.
• Integrate security controls into the software development lifecycle and operational processes in collaboration with cross-functional teams.
• Respond to customer security issues, security alerts, and potential incidents.
• Work alongside security engineers, full-stack developers, and customer-facing teams.

Requirements

• Production development experience with at least one programming language. Grafana Labs primarily uses Go, TypeScript, and Python.
• Ability to discuss programming principles including algorithms, data structures, and optimization during a code screen.
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes.
• Experience with multiple cloud providers is a strong plus.
• Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows.
• Strong interpersonal and communication skills for working with peers, stakeholders, auditors, and customers.
• Understanding of industry-recognized security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, and GDPR.
• A degree in Computer Science, Information Security, or a related field, or equivalent experience.

Bonus Points

• Working knowledge of Grafana Labs open-source projects and products.
• Experience using observability tooling to solve security problems.
• Experience working with open-source communities.
• Experience using technical automations to prove infrastructure compliance.
• Experience securing large-scale distributed systems running in public clouds.
• Experience building, implementing, and improving security program maturity in cloud-based SaaS organizations.
• Experience guiding and negotiating with peers, stakeholders, customers, and auditors.

Benefits

• Base compensation in Sweden of SEK 775,444–SEK 930,533 per year.
• Restricted Stock Units (RSUs) for all roles.
• 100% remote work and a global culture.
• Career growth pathways.
• In-person onboarding.
• Global annual leave policy of 30 days per year, including three Grafana Shutdown Days, subject to local legislation.

The position is remote and candidates are being sought in the UK, Ireland, Spain, Germany, or Sweden. Grafana Labs is an equal opportunities employer.