Senior Software Engineer, Security Assurance

About the Role

Join Grafana Labs as a Senior Software Engineer on our GRC engineering team to build and scale automated security systems. This is a hands-on, technical role focused on enhancing our security observability, compliance, and control management for a cloud-native, remote-first organization.

Responsibilities

• Develop, implement, and maintain highly automated security assurance programs for compliance with standards like ISO 27001, SOC 2, GDPR, and NIST.
• Create systems and automations for security observability to drive the GRC engineering organization beyond basic certification requirements.
• Deploy security and compliance checks as guardrails and paved roads within daily workflows and build pipelines.
• Collaborate with cross-functional teams to integrate security controls throughout the SDLC and operational processes.
• Respond to customer security issues, alerts, and potential incidents.

Requirements

• Proven experience developing in a production environment with at least one programming language (Go, TypeScript, Python preferred).
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes.
• Experience in automating security and compliance processes using tools and scripts.
• Strong interpersonal skills for effective communication with peers, stakeholders, auditors, and customers.
• Understanding of industry-recognized security frameworks and standards (e.g., ISO 27001, SOC 2, PCI DSS, NIST, GDPR).
• A degree in Computer Science, Information Security, or related field, or equivalent experience.

Nice-to-Haves

• Working knowledge of Grafana Labs OSS projects and products.
• Experience using observability tooling to solve security problems.
• Experience securing large-scale distributed systems running in public clouds.