Описание

Grafana Labs is looking for a Senior Software Engineer, Security Assurance to join its GRC engineering team, which builds automated, data-driven security systems with defense-in-depth and self-healing principles for a highly autonomous, remote-first, cloud-native organization.

Responsibilities

Be a technical contributor on the GRC team, covering certifications, application, build, cloud, and supply chain security, and internal security tooling development
Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX)
Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements
Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in daily workflows and build pipelines
Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes
Respond to customer security issues, security alerts, and potential incidents

Requirements

Experience developing in a production environment with at least one programming language, primarily Go, TypeScript, and Python
Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes
Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
Strong interpersonal skills, requiring communication with peers, stakeholders, auditors, and customers
Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden
A degree in Computer Science, Information Security, or related field (or equivalent experience)

Nice to have

Working knowledge of Grafana Labs OSS projects and products
Experience in using observability tooling to solve security problems
Experience working with OSS communities
Experience in using technical automations to prove infrastructure compliance
Experience securing large-scale distributed systems running in public clouds

We offer

Base compensation range for this role in the UK is £91,755 - £110,106
All roles include Restricted Stock Units (RSUs)
100% Remote, Global Culture
30 days of annual leave per annum, with 3 days reserved for Grafana Shutdown Days