Senior Software Engineer, Security Assurance | UK | Remote

Details

Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join its GRC engineering team. The role focuses on building automated, data-driven security observability, compliance, and control management systems for a highly autonomous, remote-first, cloud-native organization.

The engineer will develop services and tools that proactively defend systems, provide visibility into security posture, and give engineers and stakeholders secure guardrails and paved roads. The role is highly technical and hands-on, requiring production software development experience and collaboration across security, engineering, customer-facing teams, stakeholders, and auditors.

Responsibilities

• Contribute technically to the GRC team across certifications, application security, build security, cloud security, supply chain security, and internal security tooling.
• Develop, implement, and maintain automated security assurance programs supporting organizational and regulatory requirements, including ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, and TISAX.
• Build systems, automations, and methods for security observability.
• Deploy security and compliance checks through employee-enabling guardrails and paved roads in daily workflows and build pipelines.
• Integrate security controls into software development lifecycle and operational processes.
• Respond to customer security issues, security alerts, and potential incidents.
• Collaborate with security engineers, full-stack developers, stakeholders, customers, and auditors.

Requirements

• Production development experience with at least one programming language. Grafana Labs primarily uses Go, TypeScript, and Python.
• Ability to discuss programming principles including algorithms, data structures, and optimization as part of a code screen.
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes.
• Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows.
• Strong interpersonal and communication skills.
• Understanding of recognized security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR.
• A degree in Computer Science, Information Security, or a related field, or equivalent experience.

Bonus Qualifications

• Working knowledge of Grafana Labs open-source projects and products.
• Experience using observability tooling to solve security problems.
• Experience working with open-source communities.
• Experience using technical automations to prove infrastructure compliance.
• Experience securing large-scale distributed systems running in public clouds.
• Experience with multiple cloud providers.
• Experience building, implementing, or improving security programs in cloud-based SaaS organizations.

Compensation

The UK base compensation range is £91,755–£110,106 per year. Compensation may vary based on level, experience, and skillset. The role also includes Restricted Stock Units (RSUs).

Benefits

• 100% remote, global culture.
• Career growth pathways.
• In-person onboarding.
• Global annual leave policy of 30 days per year, including three Grafana Shutdown Days, subject to local legislation.
• Open, transparent, and collaborative working environment.

Grafana Labs is an equal opportunities employer. The company may use AI tools to assist with matching CV information to job postings, with manual review by the recruitment team.