Senior Software Engineer, Security Assurance - Grafana Labs

Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building an automated, data-driven security system built from the ground up with defense-in-depth and self-healing in mind, supporting a highly autonomous, remote-first, cloud-native organization.

Note: This is a remote position open to candidates located in the UK, Ireland, Spain, Germany, or Sweden.

The Opportunity

You will build out our security observability, compliance, and control management systems and tools. You will develop services to proactively defend our systems, provide visibility into our security posture, and establish guardrails and paved roads for engineers. You will collaborate across teams to write and deploy security policies across the SDLC, applications, and infrastructure.

What You'll Be Doing

• Contribute technically to our GRC team across certifications, application, build, cloud, and supply chain security, alongside internal security tooling development.
• Develop, implement, and maintain highly automated security assurance programs for compliance requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX).
• Build systems, automations, and security observability methods to push GRC beyond standard certification requirements.
• Deploy security and compliance checks as guardrails and paved roads in daily workflows and build pipelines.
• Integrate security controls into the software development lifecycle and operational processes.
• Respond to customer security issues, security alerts, and potential incidents.

What Makes You a Great Fit

• Production development experience with at least one programming language (we primarily use Go, TypeScript, and Python).
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes, and experience with multiple cloud providers.
• Experience automating security and compliance processes using tools, scripts, and frameworks.
• Strong interpersonal skills to communicate effectively with peers, stakeholders, auditors, and customers.
• Understanding of security frameworks like ISO 27001, SOC 2, PCI DSS, NIST, or GDPR.
• Degree in Computer Science, Information Security, or related field (or equivalent experience).

Why You'll Thrive at Grafana Labs

• 100% Remote, Global Culture
• Global annual leave policy of 30 days per annum (including 3 Grafana Shutdown Days)
• Restricted Stock Units (RSUs) providing ownership in company success
• Transparent communication, autonomous environment, and open-source roots