Senior Software Engineer, Security Assurance - Grafana Labs

Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards, Grafana Cloud brings AI to observability and observability to AI.

We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind.

Note: This is a remote position open to candidates located in the UK, Ireland, Spain, Germany, or Sweden.

The Opportunity

You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.

What You’ll Be Doing

• Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development.
• Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX).
• Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements.
• Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines.
• Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes.
• Respond to customer security issues, security alerts, and potential incidents.

What Makes You a Great Fit

• Experience developing in a production environment with at least one programming language (we primarily use Go, TypeScript, and Python).
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes, and experience with multiple cloud providers.
• Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows.
• Strong interpersonal skills, with experience communicating with peers, stakeholders, auditors, and customers.
• Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR.
• A degree in Computer Science, Information Security, or a related field (or equivalent experience).

Why You’ll Thrive at Grafana Labs

• 100% Remote, Global Culture: Bring together talent from around the world, united by collaboration and shared purpose.
• Innovation-Driven: Autonomy and support to ship great work and try new things.
• Open Source Roots: Built on community-driven values that shape how we work.
• Empowered Teams: High trust, low ego culture that values outcomes over optics.
• Global Annual Leave: 30 days per annum (including 3 Grafana Shutdown Days).
• Ownership: All roles include Restricted Stock Units (RSUs) to give team members ownership in Grafana Labs' success.