Senior Software Engineer, Security Assurance

• Contribute technically to the GRC team across certifications, application, build, cloud, and supply chain security
• Develop, implement, and maintain highly automated security assurance programs
• Ensure compliance with organizational and regulatory requirements
• Develop systems, automations, and methods of security observability
• Deploy security and compliance checks through guardrails and paved roads in daily workflows and build pipelines
• Integrate security controls into the software development lifecycle and operational processes
• Respond to customer security issues, security alerts, and potential incidents
• Collaborate with security engineers, full-stack developers, customer-facing teams, stakeholders, auditors, and customers

• Experience developing in a production environment with at least one programming language
• Ability to discuss algorithms, data structures, and optimization in a code screen
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes
• Experience with multiple cloud providers is a strong plus
• Experience automating security and compliance processes using tools, scripts, and frameworks
• Strong interpersonal skills and communication with peers, stakeholders, auditors, and customers
• Understanding of security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR
• Degree in Computer Science, Information Security, or related field, or equivalent experience
• Working knowledge of Grafana Labs OSS projects and products is a bonus
• Experience working with OSS communities is a bonus
• Experience using technical automations to prove infrastructure compliance is a bonus
• Experience securing large-scale distributed systems running in public clouds is a bonus

• Restricted Stock Units (RSUs)
• 100% remote, global culture
• Career growth pathways
• In-person onboarding
• 30 days annual leave per annum
• 3 annual leave days reserved for Grafana Shutdown Days
• Transparent communication and regular company-wide updates
• Autonomy and support to ship great work and try new things
• Empowered, high-trust, low-ego culture
• Approachable, transparent leadership