SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: EUR 117,600 - 141,120 / annual
Grafana Labs is seeking an Engineering Manager to lead the application security engineering team. This is a remote role open to candidates in the UK, Spain, and Ireland.
You will be responsible for developing and implementing security strategies and liaising with other teams to deliver the company's overall security posture. A key aspect of this role is being accountable for the security of software you don't write, in teams that don't report to you. Success comes from making the secure path the easiest one.
Responsibilities include:
- Leading the application security team covering application security, cloud security, and internal tooling development
- Managing 1st and 3rd party vulnerability management, including coordinated disclosure and embargoed fixes
- Defining, optimizing, and implementing engineering strategy in concert with security leadership, individual contributors, and business stakeholders
- Conducting regular 1:1s, coaching, and mentoring to keep team members motivated, engaged, and providing continuous feedback
- Collaborating with engineering leaders and stakeholders to define and influence product strategy, roadmaps, and designs
- Being actively engaged with significant incidents, including preparation, simulation, response, and customer notification
- Contributing to and reviewing design documents, ensuring projects are well-defined and ready for development
The ideal candidate has a proven track record of implementing and improving security program maturity through automation and systematic approaches in cloud-based SaaS organizations. You possess excellent leadership and communication skills, can distinguish between findings and risks, and know how to prioritize risk mitigation. You must have significant engineering acumen and be able to review threat models, challenge severity ratings, and contribute to design reviews.
Bonus qualifications include a technical background with programming or software engineering experience before transitioning to security and leadership, working knowledge of Grafana Labs OSS projects, experience with OSS communities, and experience securing large-scale distributed systems.
Requirements:
- Prior experience running a security engineering team
- Strong engineering background capable of engaging in technical conversations and challenging teams to make strong technical decisions
- Comfort working with autonomous engineering teams in technical and product-focused decision-making
- Ability to stay current with technical trends while excelling at people management and relationship building
- DevOps mindset: preference for security by enablement, automation, and guardrails over gates and roadblocks
- Familiarity with securing and operating on public cloud providers (AWS, GCP, Azure), Kubernetes, and securing combined open-source software and SaaS products
- Excellent written and verbal communication skills; ability to articulate complex cybersecurity concepts to both technical and non-technical audiences; skill in translating security problems to business impact
