Senior Security Assurance Engineer - Cloud/GRC Automation

Grafana; Madrid; Remote; EUR 83,000 - 100,000; Full time

Benefits offered by this job

RSUs

30 days annual leave

Grafana Shutdown Days

Job summary

Grafana Labs is a remote-first company building Grafana Cloud, a leading observability platform. We are seeking a Senior Software Engineer, Security Assurance to join the GRC engineering team and help automate large-scale security programs across our SaaS stack.

You will develop security observability, compliance, and control systems, collaborating with engineers, security, and auditors to push automated, data-driven security further in our SDLC and cloud infrastructure.

Qualifications

• Production-level software development experience.
• Experience with Go, TypeScript, or Python in a SaaS/cloud setting.
• Experience securing cloud-native applications and containers.
• Familiarity with security standards (ISO 27001, SOC 2, GDPR, NIST, PCI-DSS).
• Strong collaboration and communication with stakeholders and auditors.

Responsibilities

• Be a technical contributor on the GRC team across certifications, applications, cloud, and security tooling.
• Develop and maintain automated security assurance programs for compliance.
• Build security observability and guardrails in SDLC and deployment pipelines.
• Deploy security checks that enable developers without friction.
• Collaborate with cross-functional teams to integrate controls in the software life cycle.
• Respond to security incidents and alerts.

Skills

Go

TypeScript

Python

Cloud-native architectures

Security automation

Communication

Security frameworks

Education

Bachelor's degree in Computer Science or related field

Tools

Kubernetes

Job description

Grafana Labs is a remote-first company building Grafana Cloud, a leading observability platform. We are seeking a Senior Software Engineer, Security Assurance to join the GRC engineering team and help automate large-scale security programs across our SaaS stack.

You will develop security observability, compliance, and control systems, collaborating with engineers, security, and auditors to push automated, data-driven security further in our SDLC and cloud infrastructure.