Senior Software Engineer - Security Assurance
Level inferred from job title
Job description
Senior Software Engineer, Security Assurance on Grafana Labs' GRC engineering team, building automated security observability, compliance, and control management systems and tools. The role is a hands-on software engineering position focused on deploying security policies and guardrails across the SDLC, applications, and infrastructure.
At a glance
- Work mode
- Remote
What you'll do
- Be a technical contributor on the GRC team covering certifications, application, build, cloud, and supply chain security, and internal security tooling development
- Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX)
- Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements
- Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in daily workflows and build pipelines
- Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes
- Respond to customer security issues, security alerts, and potential incidents
What we're looking for
- Experience developing in a production environment with at least one programming language (Go, TypeScript, and Python primarily used)
- Take a code screen and discuss programming principles such as algorithms, data structures, and optimization
- Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes
- Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
- Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers
- Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR
Nice to have
- Experience with multiple cloud providers
- Experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations
- Experience guiding and negotiating with peers, stakeholders, customers, and auditors
Your team
GRC engineering team
A technical team that can build any tool it needs, while knowing when to buy to improve velocity; embraces agile principles, shares openly, applies context-driven security mechanisms, defaults to action, and has an OSS-first mindset.
How to get hired
- 1Code screen
Apply
Direct apply at Grafana Labs
Opens the job posting at Grafana Labs
About Grafana Labs
The company behind Grafana Cloud, the fully managed observability platform
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions.
Key facts
- 100% remote company with team members across 40+ countries
- Trusted by more than 10,000 organizations
- Backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital
- Built on open source and open standards
Partners & customers
What they value
- Transparency
- Autonomy
- Trust
- Open source
- Collaborative culture