Software Security Engineer

Grafana Labs; Canada; Remote; CAD 80,000 - 110,000; Full time

Job summary

A leading open-source technology company is seeking a Security Assurance Engineer to join their team. This remote position requires experience in programming and cloud-native security, aimed at building automated security systems that meet compliance standards. Ideal candidates will have strong interpersonal skills and a degree in a relevant field. The role involves collaboration across teams to enhance security policies and practices.

Qualifications

• Solid experience with at least one programming language.
• Knowledge of securing containerized, cloud-native applications.
• Experience in automating security compliance processes.

Responsibilities

• Be a technical contributor on assurance team on various security areas.
• Develop, implement, and maintain automated security assurance programs.
• Collaborate with teams to integrate security controls into operational processes.

Skills

Programming

Containerization

Security compliance automation

Interpersonal skills

Education

Degree in Computer Science, Information Security, or related field

Tools

Kubernetes

Job description

Grafana Labs is a remote-first, open-source powerhouse with over 20M users worldwide. We are looking for a Security Assurance Engineer to join our GRC engineering team.

We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. The ideal candidate will have experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations.

The Opportunity:

The Security Assurance Engineer will collaborate across their team, the security department, and wider Grafana to articulate security policies, implement continuous monitoring, automate workflows, and write and deploy policies across all of our SDLC, applications, and infrastructure.

What You’ll Be Doing:

• Be a technical contributor on our assurance team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development
• Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements
• Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements
• Deploy security and compliance checks in an employee-enabling way in their daily workflows and build pipelines
• Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes
• Respond to customer security issues, security alerts, and potential incidents

What Makes You a Great Fit:

• Solid experience with at least one programming language
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes
• Experience in automating security compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
• Strong interpersonal skills and experience collaborating with peers, stakeholders, auditors, and customers
• Some understanding of industry-recognized security frameworks, standards, and certifications
• A degree in Computer Science, Information Security, or related field

Grafana Labs is an equal opportunity employer. We believe that equality and diversity build a strong organization and we’re working hard to make sure that’s the foundation of our organization as we grow.