SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: SEK 775,444 - 930,533 / annual
Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join the GRC (Governance, Risk, and Compliance) engineering team. You will build automated, data-driven security systems designed with defense-in-depth and self-healing capabilities to support a highly autonomous, remote-first, cloud-native organization.
In this hands-on technical role, you will develop services and tools to proactively defend systems, provide visibility into security state, and create guardrails and paved roads for engineers and stakeholders to behave securely. You will collaborate across the security department and wider Grafana to write and deploy security policies across the SDLC, applications, and infrastructure.
Key responsibilities include:
- Serve as a technical contributor on the GRC team covering certifications, application, build, cloud, and supply chain security, and internal security tooling development
- Develop, implement, and maintain highly automated security assurance programs ensuring compliance with organizational and regulatory requirements (ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, etc.)
- Develop systems, automations, and methods of security observability to push beyond just meeting certification requirements
- Deploy security and compliance checks in an employee-enabling way within daily workflows and build pipelines
- Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes
- Respond to customer security issues, security alerts, and potential incidents
You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is valuable. Grafana Labs is a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, and others. Customers include Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce.
Requirements:
- Production development experience with at least one programming language (Go, TypeScript, Python preferred, but most languages translate well); ability to discuss programming principles such as algorithms, data structures, and optimization
- Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes; experience with multiple cloud providers is a strong plus
- Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
- Strong interpersonal skills for communication with peers, stakeholders, auditors, and customers
- Understanding of industry-recognized security frameworks, standards, and certifications (ISO 27001, SOC 2, PCI DSS, NIST, GDPR) and how to apply them without added operational burden
- Degree in Computer Science, Information Security, or related field (or equivalent experience)
Bonus qualifications:
- Working knowledge of Grafana Labs OSS projects and products; experience using observability tooling to solve security problems
- Experience working with OSS communities
- Experience using technical automations to prove infrastructure compliance
- Experience securing large-scale distributed systems running in public clouds
