Engineering Manager - Grafana Application Security

Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams unified visibility across disparate data.

We are a 100% remote company with team members across 40+ countries. This role is remote and considers candidates based in the UK, Spain, and Ireland.

About the Role

We are looking for an Engineering Manager to lead our Application Security Engineering team. You will be responsible for developing and implementing security strategies, as well as liaising with other teams delivering parts of our overall security posture. You'll be accountable for the security of software you don't write, in teams that don't report to you. The people who do well in this role get there by making the secure path the easiest one.

The ideal candidate has a proven track record of implementing and improving the maturity of security programs through automation and systematic approaches in Cloud-based SaaS organizations. You can tell the difference between a finding and a risk, prioritize risk mitigation, and guide the squad toward the most effective use of their time.

Responsibilities

• Lead our application security team covering application security, cloud security, and internal tooling development.
• Lead 1st and 3rd party vulnerability management, including coordinated disclosure with external reporters and embargoed fixes.
• Define, optimize, and implement engineering strategy in concert with the security leadership team, ICs, and stakeholders across the business.
• Conduct regular 1:1s, coaching, and mentoring to keep team members motivated, happy, and engaged while maintaining high standards.
• Collaborate with engineering leaders and stakeholders to define and influence wider product strategy, roadmaps, and designs.
• Be actively engaged with significant incidents, including preparation, simulation, response, and affected customer communications.
• Contribute to and review design documents for upcoming projects, ensuring projects are well-defined and ready for development.

Requirements

• Prior experience running a security engineering team.
• Strong engineering background capable of engaging in technical conversations and challenging teams to reach strong technical decisions.
• Comfort working with engineering teams that possess a high degree of decision-making autonomy.
• Up-to-date knowledge of the latest technical trends and shifts to maintain understanding of team challenges.
• A DevOps mindset toward security, prioritizing enablement, automation, and guardrails over gates and roadblocks.
• Familiarity with securing and operating on public Cloud providers (AWS, GCP, Azure), Kubernetes, and securing open-source software (OSS) / SaaS combined products.
• Excellent written and verbal communication skills, with the ability to translate complex cybersecurity concepts to business impact.

Bonus Points

• Technical background with programming or software engineering experience prior to transitioning into security leadership.
• Working knowledge of Grafana Labs OSS projects and products, and using observability tooling to solve security problems.
• Experience working with OSS communities.
• Experience securing large-scale distributed systems.

Compensation & Benefits

• Base Salary Range (UK): £103,958 - £124,750 (varies based on level, experience, and location).
• Equity: Restricted Stock Units (RSUs) included with all roles.
• Paid Time Off: Global annual leave policy of 30 days per annum, including 3 reserved Grafana Shutdown Days.
• Work Environment: 100% remote global culture, transparent communication, and in-person onboarding.