Remote Senior Security Assurance Engineer, Cloud & GRC

Grafana; Greater London; Remote; GBP 92,000 - 110,000; Full time

Benefits offered by this job

RSUs

Annual leave 30 days

Grafana Shutdown Days

Remote-friendly culture

Job summary

Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join our GRC engineering team. You will build security observability, compliance, and control management systems and collaborate across teams to deploy security policies across SDLC and infrastructure.

This is a highly technical role in a remote-first, cloud-native environment. Knowledge of security standards such as ISO 27001, SOC 2, GDPR, NIST, and PCI-DSS is valuable, with experience in Kubernetes and cloud platforms

Qualifications

• Production software development experience in at least one language; Go/TypeScript/Python preferred.
• Strong background building secure, cloud-native applications and services.
• Familiarity with security frameworks and certifications (ISO 27001, SOC 2, GDPR, NIST, PCI DSS).
• Excellent collaboration with peers, stakeholders, auditors, and customers.
• Degree in CS, Info Security, or related field (or equivalent experience).
• Comfort with code reviews, design discussions, and security requirements in SDLC.

Responsibilities

• Be a technical contributor on the GRC team across security certifications and tooling.
• Develop, automate, and maintain security assurance programs and policies.
• Build security observability and compliance checks within CI/CD and cloud environments.
• Integrate security controls into software development lifecycle and operations.
• Respond to security issues, alerts, and potential incidents when needed.
• Collaborate with cross-functional teams and external auditors as required.

Skills

Go

TypeScript

Python

Kubernetes

Cloud security

Education

CS or Info Security degree

Tools

Kubernetes

Job description

Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join our GRC engineering team. You will build security observability, compliance, and control management systems and collaborate across teams to deploy security policies across SDLC and infrastructure.

This is a highly technical role in a remote-first, cloud-native environment. Knowledge of security standards such as ISO 27001, SOC 2, GDPR, NIST, and PCI-DSS is valuable, with experience in Kubernetes and cloud platforms