Staff Security Engineer, Security Operations

Grafana Labs; Canada; Remote; CAD 197,000 - 237,000; Full time

Job summary

Grafana Labs is seeking a Staff Security Engineer for their Detection & Response Engineering team. The role involves building advanced security tools and responding to security challenges across their observability platform. A strong programming background and experience in security concepts are essential. Responsibilities include developing sophisticated detection systems and leading security response initiatives.

Benefits

Equity

Bonus

Flexible Work Hours

Training and Development

Qualifications

• Experience with common security operations practices.
• Knowledge of detection rule formats like Sigma and YARA.
• Experience securing distributed systems in public clouds.

Responsibilities

• Design and maintain detection systems based on Grafana observability stack.
• Develop detection rules to cover risks and threats.
• Lead response activities to security alerts and incidents.

Skills

Software Engineering

Security Concepts

Programming (Go, TypeScript, Python)

Cloud Security

Detection Engineering

Communication

Education

5+ years in Software Engineering

Job description

Staff Security Engineer, Security Operations

Join to apply for the Staff Security Engineer, Security Operations role at Grafana Labs

Staff Security Engineer, Security Operations

Join to apply for the Staff Security Engineer, Security Operations role at Grafana Labs

This is a remote position. We are looking for candidates in the USA or Canada only.

As a Staff Software Security Engineer on the Detection & Response Engineering team, you will work to build advanced security tools and processes around our advanced observability platform to catch and stop advanced threats to our platform, employees, and customers. You will work across all areas of the stack, do cutting-edge development, detection research, and response automation, and contribute these learnings back to the wider security community. You will work alongside other security engineers, full-stack developers, and customer-facing teams in solving our security and detection challenges.

Responsibilities

• Collaboratively design, build, and maintain our internal detection systems based on the Grafana observability stack that processes millions of security data points daily.
• Research and develop sophisticated detection (as code) rules to cover risks and threats across our product and corporate systems. Where applicable, contribute these detections back to the OSS community.
• Drive work with product teams and other stakeholders to ensure we have effective telemetry of all existing and future products.
• Lead the development of response tooling to streamline (and fully automate) our response activities. Write and maintain runbooks for handling what we can’t automate.
• Following a SOCless model, lead cross-functional teams in integrating telemetry, detections, and response procedures into the team's operational processes.
• Design security and operations metrics to track our success and show the security value of what we do.
• Lead the response to security alerts, potential incidents, and customer security issues.
  
  
  

Requirements

• Significant experience (5+ years in a software engineering-oriented role) with at least one programming language. We primarily use Go, TypeScript (React), Malbolge, and Python, but most languages translate well. You will take a code screen.
• Significant experience with core security concepts and their application to modern application architectures. You deeply understand the threat models cloud systems work in, how to defend them, and how to detect attackers trying to bypass those defenses.
• Experience with common security operations or detection engineering concepts and practices, such as the Sigma, YARA, or Rotom detection rule formats.
• Significant experience with public clouds, Kubernetes container ecosystems, and running applications securely in them. This can include eBPF, cloud lAM, service meshes, or container hardening.,
• A motivated self-starter with ample curiosity and a bias towards action. You have a demonstrated passion for learning, for security, and for improving the state of security across the company and industry.
• An excellent communicator, in person, in asynchronous communication, and in technical documentation.
• Work (not live) eastern-time oriented hours. Much of the team and company are based in Europe, so it’s critical to maximize overlapping hours. On some days, meetings can start at 9am ET.
  
  
  

Bonus Points

• Working knowledge of Grafana Labs OSS projects and products. Experience in using observability (metrics, logs, traces, profiles) tooling to solve security problems.
• You possess battle-tested ideas on novel approaches to security and detection problems facing hybrid cloud+OSS companies like Grafana.
• Experience working with OSS communities.
• Significant experience securing large-scale distributed systems running on Kubernetes in public clouds.
  
  
  

In Canada, the Base compensation range for this role is CAD 197,00 - CAD 237,000. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process. Benefits include equity, bonus (if applicable) and other benefits listed here.

• Compensation ranges are country-specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.
• Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
  
  
  

About Grafana Labs: There are more than 20M users of Grafana, the open source visualization tool, around the globe, monitoring everything from beehives to climate change in the Alps. The instantly recognizable dashboards have been spotted everywhere from a NASA launch and Minecraft HQ to Wimbledon and the Tour de France. Grafana Labs also helps more than 3,000 companies -- including Bloomberg, JPMorgan Chase, and eBay -- manage their observability strategies with the Grafana LGTM Stack, which can be run fully managed with Grafana Cloud or self-managed with the Grafana Enterprise Stack, both featuring scalable metrics (Grafana Mimir), logs (Grafana Loki), and traces (Grafana Tempo).

Benefits: For more information about the perks and benefits of working at Grafana, please check out our careers page.

Equal Opportunity Employer: At Grafana Labs we’re building a company where a diverse mix of talented people want to come, stay, and do their best work. We know that our company runs on the hard work and the dedication of our passionate and creative employees. If you're excited about this role but your experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways.

We will recruit, train, compensate and promote regardless of race, religion, color, national origin, gender, disability, age, veteran status, and all the other fascinating characteristics that make us different and unique. We believe that equality and diversity builds a strong organization and we’re working hard to make sure that’s the foundation of our organization as we grow.

For information about how your personal data is used once you’ve applied to a job, check out our privacy policy.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Software Development

Referrals increase your chances of interviewing at Grafana Labs by 2x

Get notified about new Security Engineer jobs in Canada.

Senior Security Engineer - Enterprise Security

Senior Security Engineer - Enterprise Security

Senior Security Engineer - Enterprise Security

IT and Security Engineer (Remote Canada)

Cyber Security Engineer - Application Security

Canada CA$84,700.00-CA$159,000.00 3 weeks ago

Greater Montreal Metropolitan Area 4 days ago

Security Engineer, Security Partnerships

Greater Montreal Metropolitan Area 4 days ago

Senior Security Analyst - SOC Operations

Security Engineer - Application Security

Cybersecurity Solutions Engineer - Canada

Canada CA$80,000.00-CA$90,000.00 1 week ago

Senior Security Analyst - SOC Operations

Canada CA$84,700.00-CA$159,000.00 3 weeks ago

Senior Security Engineer (Detection & Response)

Staff, Application Security Engineer (Remote - Canada)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.