Senior Software Engineer, Security Assurance

📍 Germany
📍 Spain
📍 United Kingdom
📍 Ireland
📍 Sweden

EUR 83,000-99,600 per year

SENIOR

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

Algorithms @ 6 Communication @ 7 Compliance @ 4 Data Structures @ 6 Distributed Systems @ 4 GDPR @ 4 Go @ 6 Grafana @ 4 Kubernetes @ 4 Observability @ 4 Python @ 6 Security @ 4 Software Development @ 4 TypeScript @ 6

Details

Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join its GRC engineering team. The role focuses on building automated, data-driven security systems with defense-in-depth and self-healing capabilities for a remote-first, cloud-native organization.

Responsibilities

Build security observability, compliance, and control management systems and tools.
Develop services and tools to proactively defend systems, provide visibility into security posture, and give engineers and stakeholders secure guardrails and paved roads.
Contribute technically to the GRC team across certifications, application security, build security, cloud security, supply chain security, and internal security tooling.
Develop, implement, and maintain automated security assurance programs for organizational and regulatory requirements, including ISO 27001, SOC 2, GDPR, NIST, PCI DSS, and TISAX.
Develop systems, automations, and methods of security observability that extend beyond certification requirements.
Deploy security and compliance checks in employee workflows and build pipelines.
Integrate security controls into software development lifecycle and operational processes.
Respond to customer security issues, security alerts, and potential incidents.
Collaborate with security engineers, full-stack developers, customer-facing teams, stakeholders, auditors, and customers.

Requirements

Production software development experience with at least one programming language. Grafana Labs primarily uses Go, TypeScript, and Python.
Ability to discuss programming principles including algorithms, data structures, and optimization, and complete a code screen.
Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes.
Experience with multiple cloud providers is a strong plus.
Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows.
Strong interpersonal and communication skills for working with peers, stakeholders, auditors, and customers.
Understanding of security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, and GDPR.
Degree in Computer Science, Information Security, or a related field, or equivalent experience.

Bonus Qualifications

Working knowledge of Grafana Labs open-source projects and products.
Experience using observability tooling to solve security problems.
Experience working with open-source communities.
Experience using technical automations to prove infrastructure compliance.
Experience securing large-scale distributed systems running in public clouds.
Experience building, implementing, and improving security programs in cloud-based SaaS organizations.

Benefits

Restricted Stock Units (RSUs).
100% remote global culture.
Career growth pathways.
In-person onboarding.
Global annual leave policy of 30 days per annum, including three Grafana Shutdown Days, subject to local legislation.