Senior Security Assurance Engineer - Remote (UK)

VulnU; United Kingdom; Remote; GBP 92,000 - 110,000; Full time

Benefits offered by this job

RSUs

Remote work

30 days annual leave

Job summary

Grafana Labs is seeking a Senior Software Engineer for Security Assurance to join the GRC engineering team. You will build security observability, compliance, and control management systems for a cloud-native, remote-first environment.

This role emphasizes automated programs, cross-functional collaboration, and proactive defense across SDLC and infrastructure. You will work with Go, TypeScript, and Python, and engage with ISO 27001, SOC 2, GDPR, NIST, PCI-DSS frameworks.

Qualifications

• Production experience in Go, TypeScript, and Python.
• Experience with containerized, cloud-native apps, ideally Kubernetes.
• Knowledge of security frameworks (ISO 27001, SOC 2, GDPR, PCI DSS, NIST).
• Degree in Computer Science or Information Security or related field.

Responsibilities

• Be a technical contributor on the GRC team covering certifications, applications, build, cloud, and supply chain security.
• Develop, implement, and maintain automated security assurance programs to ensure compliance (ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, etc.).
• Develop security observability systems, automations, and methods to push the org beyond basic certification requirements.
• Deploy security and compliance checks in daily workflows and build pipelines to guide engineers.
• Collaborate with cross-functional teams to integrate controls into the SDLC and operations.
• Respond to customer security issues, alerts, and potential incidents.

Skills

Go

TypeScript

Python

Kubernetes

Cloud

Automation

Security

Communication

Security frameworks

Education

Degree in Computer Science or Information Security

Job description

Grafana Labs is seeking a Senior Software Engineer for Security Assurance to join the GRC engineering team. You will build security observability, compliance, and control management systems for a cloud-native, remote-first environment.

This role emphasizes automated programs, cross-functional collaboration, and proactive defense across SDLC and infrastructure. You will work with Go, TypeScript, and Python, and engage with ISO 27001, SOC 2, GDPR, NIST, PCI-DSS frameworks.