Senior Software Engineer, Security Assurance

Details

Grafana Labs is looking for a Senior Software Engineer, Security Assurance to join its GRC engineering team. The team is building an automated, data-driven security system with defense-in-depth and self-healing capabilities for a highly autonomous, remote-first, cloud-native organization.

The role focuses on building security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend systems, provide visibility into security posture, and give engineers and stakeholders secure guardrails and paved roads. You will collaborate across the security department and the wider organization to write and deploy security policies across the software development lifecycle, applications, and infrastructure.

This is a technical, hands-on software engineering role. Experience developing in production environments is critical, along with an interest in building and improving security programs in cloud-based SaaS organizations.

Responsibilities

• Contribute technically to the GRC team across certifications, application security, build security, cloud security, supply chain security, and internal security tooling development.
• Develop, implement, and maintain automated security assurance programs supporting organizational and regulatory requirements, including ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, and TISAX.
• Develop systems, automations, and methods for security observability that extend beyond certification requirements.
• Deploy security and compliance checks in an employee-enabling way through guardrails and paved roads in daily workflows and build pipelines.
• Collaborate with cross-functional teams to integrate security controls into software development lifecycle and operational processes.
• Respond to customer security issues, security alerts, and potential incidents.
• Guide and negotiate with peers, stakeholders, customers, and auditors where necessary.

Requirements

• Production development experience with at least one programming language. Grafana Labs primarily uses Go, TypeScript, and Python, although experience with other languages is applicable.
• Ability to discuss programming principles including algorithms, data structures, and optimization during a code screen.
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes.
• Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows.
• Strong interpersonal and communication skills for working with peers, stakeholders, auditors, and customers.
• Understanding of industry-recognized security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR.
• A degree in Computer Science, Information Security, or a related field, or equivalent experience.

Bonus Qualifications

• Working knowledge of Grafana Labs open-source projects and products.
• Experience using observability tooling to solve security problems.
• Experience working with open-source communities.
• Experience using technical automations to prove infrastructure compliance.
• Experience securing large-scale distributed systems running in public clouds.
• Experience with multiple cloud providers.

Benefits

• Restricted Stock Units (RSUs) for all roles.
• 100% remote, global culture.
• Career growth pathways.
• In-person onboarding.
• Global annual leave policy of 30 days per annum, including three Grafana Shutdown Days, subject to local legislation.

The role is remote, and candidates are sought in the United Kingdom, Ireland, Spain, Germany, or Sweden.