Senior Security Assurance Engineer — Remote (EU)

Grafana; España; Remote; EUR 83,000 - 100,000; Full time

Benefits offered by this job

RSUs

Remote work

Job summary

Grafana Labs is seeking a Senior Software Engineer focusing on Security Assurance to advance our security observability, compliance, and control management across a cloud-native SAAS platform. This is a remote-first role with opportunities to collaborate across teams and auditors.

You will build automation for security programs, integrate controls into SDLC, and work with engineers, security, and customers to defend systems and remain compliant with ISO, SOC 2, GDPR, and other standards.

Qualifications

• Experience developing in a production environment using one or more programming languages (Go, TypeScript, Python).
• Solid understanding of cloud-native applications and container security (Kubernetes).
• Ability to automate security and compliance processes and integrate them into CI/CD pipelines.
• Familiarity with security frameworks and standards (ISO 27001, SOC 2, GDPR, NIST, PCI-DSS).

Responsibilities

• Be a technical contributor on the GRC team covering security across certifications, applications, cloud, build, and supply chain security.
• Develop and maintain automated security assurance programs to meet regulatory requirements.
• Create security observability and compliance tooling to push the organization beyond basic certification.
• Deploy security checks into daily workflows and build pipelines to enable secure engineering.

Skills

Go

TypeScript

Python

Cloud security

Education

Degree in Computer Science or Information Security

Tools

Kubernetes

Job description

Grafana Labs is seeking a Senior Software Engineer focusing on Security Assurance to advance our security observability, compliance, and control management across a cloud-native SAAS platform. This is a remote-first role with opportunities to collaborate across teams and auditors.

You will build automation for security programs, integrate controls into SDLC, and work with engineers, security, and customers to defend systems and remain compliant with ISO, SOC 2, GDPR, and other standards.