Software Security Engineer, Detection & Response Engineering (Remote, Canada)

Grafana Labs; Canada; Remote; CAD 153,000 - 192,000; Full time

Job summary

A leading company is seeking a Software Security Engineer to enhance security tools and processes for their observability platform. This remote role focuses on detection and response engineering, requiring collaboration with various teams to tackle security challenges. Candidates should be proficient in programming, have knowledge of security concepts, and be self-motivated. The role offers a competitive salary and benefits.

Benefits

Equity

Bonuses

Qualifications

• Proficiency in at least one programming language, preferably Go, TypeScript, or Python.
• Knowledge of core security concepts and application architectures.

Responsibilities

• Design and maintain internal detection systems based on the Grafana observability stack.
• Develop response tools to automate security responses.

Skills

Programming

Communication

Curiosity

Education

Degree in Computer Science

Tools

Go

TypeScript

Python

Job description

Software Security Engineer, Detection & Response Engineering (Remote, Canada)

This is a remote position. We are looking for candidates in the USA and Canada only.

As a Software Security Engineer on the Detection & Response Engineering team, you will work to build advanced security tools and processes around our observability platform to detect and stop advanced threats to our platform, employees, and customers. Your work will span all areas of the stack, involving cutting-edge development, detection research, response automation, and sharing learnings with the wider security community. You will collaborate with security engineers, full-stack developers, and customer-facing teams to address security and detection challenges.

Responsibilities

1. Design, build, and maintain internal detection systems based on the Grafana observability stack, processing millions of security data points daily.
2. Research and develop sophisticated detection rules, contributing to open-source projects where applicable.
3. Coordinate with product teams and stakeholders to ensure effective telemetry for all products.
4. Develop and maintain response tools to automate and streamline security responses, including writing runbooks for manual procedures.
5. Integrate telemetry, detections, and response procedures into operational processes following a SOC-less model.
6. Design security and operational metrics to measure success and demonstrate security value.
7. Respond to security alerts, potential incidents, and customer security issues.

Requirements

1. Proficiency in at least one programming language; experience with Go, TypeScript (React), and Python preferred. Code screening will be part of the process.
2. Knowledge of core security concepts and their application to modern application architectures.
3. Experience with detection engineering concepts, such as Sigma detection rules.
4. Experience with public clouds, container ecosystems, and secure application deployment.
5. Self-motivated with curiosity and a proactive attitude.
6. Effective communication skills, both written and verbal, including technical documentation.
7. Degree in Computer Science or equivalent experience demonstrating coding ability.

Bonus Points

1. Familiarity with Grafana OSS projects and observability tooling for security.
2. Experience engaging with OSS communities.
3. Experience securing large-scale distributed systems on Kubernetes in cloud environments.

In Canada, the base salary range is CAD 153,000 - 192,000. Actual compensation depends on experience and skills. Benefits include equity, bonuses, and others. For applicants outside Canada, compensation details will be discussed during the process.