SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: GBP 91,755 - 110,106 / annual
Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join the GRC (Governance, Risk, and Compliance) engineering team. You will build automated, data-driven security systems designed with defense-in-depth and self-healing capabilities to support a highly autonomous, remote-first, cloud-native organization.
In this hands-on technical role, you will develop security observability, compliance, and control management systems and tools. You will create services and tools to proactively defend systems, provide visibility into security state, and establish guardrails and paved roads for secure engineering practices. Your work will span security policies across the entire SDLC, applications, and infrastructure, collaborating with security teams, engineers, and stakeholders across Grafana.
Key responsibilities include:
- Serve as a technical contributor on the GRC team covering certifications, application security, build security, cloud security, supply chain security, and internal security tooling
- Develop, implement, and maintain highly automated security assurance programs ensuring compliance with regulatory requirements (ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, etc.)
- Build systems and automations for security observability that push beyond basic certification compliance
- Deploy security and compliance checks in employee-enabling ways within daily workflows and build pipelines
- Collaborate cross-functionally to integrate security controls into SDLC and operational processes
- Respond to customer security issues, alerts, and potential incidents
Grafana Labs is a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, and others. The company operates on principles of transparency, autonomy, trust, and open-source collaboration. Customers include Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce.
REQUIREMENTS:
- Production development experience with at least one programming language (Go, TypeScript, Python preferred; most languages translate well). Must be prepared to take a code screen and discuss programming principles including algorithms, data structures, and optimization.
- Knowledge of securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus.
- Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows.
- Strong interpersonal skills for communication with peers, stakeholders, auditors, and customers.
- Understanding of industry-recognized security frameworks and standards (ISO 27001, SOC 2, PCI DSS, NIST, GDPR) and how to apply them without excessive operational burden.
- Degree in Computer Science, Information Security, or related field (or equivalent experience).
BONUS:
- Working knowledge of Grafana Labs OSS projects and products; experience using observability tooling to solve security problems
- Experience working with open-source communities
- Experience using technical automations to prove infrastructure compliance
- Experience securing large-scale distributed systems in public clouds
