Remote Senior Security Assurance Engineer

grafanalabs; United States; Remote; USD 109,000 - 131,000; Full time

Benefits offered by this job

Restricted Stock Units (RSUs)

Remote-first culture

Job summary

Grafana Labs is seeking a Senior Software Engineer - Security Assurances to join our GRC engineering team in a fully remote role. You will build out security observability, compliance, and control management systems for a cloud-native SaaS platform, collaborating across security, engineering, and product teams.

You will develop automated security programs compliant with ISO, SOC 2, GDPR, NIST and PCI-DSS, while enabling developers with guardrails and rapid feedback.

Qualifications

• Experience in production-grade software development using at least one language (Go/TypeScript/Python or similar).
• Solid understanding of algorithms, data structures and code optimization.
• Familiarity with containerized, cloud-native apps and Kubernetes is a plus.
• Knowledge of security frameworks and compliance standards (ISO, SOC 2, GDPR, NIST, PCI-DSS) is valuable.

Responsibilities

• Be a technical contributor on the GRC team across certifications, app, cloud, and internal security tooling.
• Develop, implement, and maintain automated security assurance programs to ensure regulatory compliance.
• Build security observability and controls to guide developers and engineers in secure SDLC practices.
• Collaborate with cross-functional teams to integrate security controls into software lifecycle and operations.
• Respond to security issues, alerts and incidents as part of a fast-paced cloud SaaS environment.

Skills

Go

TypeScript

Python

Security

Cloud security

Education

Bachelor's degree in CS or Information Security

Tools

Kubernetes

Cloud providers (AWS/Azure/GCP)

Job description

Grafana Labs is seeking a Senior Software Engineer - Security Assurances to join our GRC engineering team in a fully remote role. You will build out security observability, compliance, and control management systems for a cloud-native SaaS platform, collaborating across security, engineering, and product teams.

You will develop automated security programs compliant with ISO, SOC 2, GDPR, NIST and PCI-DSS, while enabling developers with guardrails and rapid feedback.