Senior Software Engineer, Security Assurance

Details

Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join its Governance, Risk, and Compliance (GRC) engineering team. The team builds automated, data-driven security systems with defense-in-depth and self-healing capabilities for a highly autonomous, remote-first, cloud-native organization.

Responsibilities

• Contribute technically to the GRC team across certifications, application security, build security, cloud security, supply chain security, and internal security tooling.
• Develop, implement, and maintain highly automated security assurance programs supporting organizational and regulatory requirements, including ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, and TISAX.
• Develop systems, automations, and security observability methods that advance the GRC engineering organization beyond certification requirements.
• Deploy security and compliance checks through developer-enabling guardrails and paved roads in daily workflows and build pipelines.
• Integrate security controls into the software development lifecycle and operational processes in collaboration with cross-functional teams.
• Respond to customer security issues, security alerts, and potential incidents.
• Write and deploy security policies across the software development lifecycle, applications, and infrastructure.

Requirements

• Production development experience with at least one programming language. Grafana Labs primarily uses Go, TypeScript, and Python.
• Ability to discuss programming principles including algorithms, data structures, and optimization during a code screen.
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes.
• Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows.
• Strong interpersonal and communication skills for working with peers, stakeholders, auditors, and customers.
• Understanding of security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without creating unnecessary operational burden.
• Degree in Computer Science, Information Security, or a related field, or equivalent experience.

Bonus Qualifications

• Working knowledge of Grafana Labs open-source projects and products, including using observability tooling to solve security problems.
• Experience working with open-source communities.
• Experience using technical automations to prove infrastructure compliance.
• Experience securing large-scale distributed systems running in public clouds.
• Experience building, implementing, or improving security programs in cloud-based SaaS organizations.
• Experience with multiple cloud providers.
• Experience guiding and negotiating with peers, stakeholders, customers, and auditors.

Benefits

• Restricted Stock Units (RSUs).
• Remote-first, global culture.
• Career growth opportunities.
• In-person onboarding.
• Global annual leave policy of 30 days per year, including three Grafana Shutdown Days, subject to local legislation.

The role is remote and candidates are sought in the United Kingdom, Ireland, Spain, Germany, or Sweden.