Senior Security Assurance Engineer — Cloud & GRC

Grafanalabs; United States; Remote; USD 122,000 - 147,000; Full time

Benefits offered by this job

RSUs

Remote work

Job summary

Grafana Labs is seeking a Senior Software Engineer focused on Security Assurance to join our GRC engineering team. You will build automated security observability, compliance, and control systems for a cloud-native SaaS environment.

This remote-first role emphasizes collaboration with security, engineering, and customer-facing teams, leveraging ISO, SOC 2, GDPR, and other standards while maintaining high-velocity delivery.

Qualifications

• Proficiency in Go, TypeScript, or Python in production.
• Experience securing containerized cloud-native apps on Kubernetes.
• Familiarity with ISO 27001, SOC 2, PCI DSS, NIST, GDPR or similar security standards.

Responsibilities

• Be a technical contributor on our GRC team covering certifications, application, build, cloud, and supply chain security, and internal security tooling development.
• Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS).
• Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements.
• Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines.
• Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes.
• Respond to customer security issues, security alerts, and potential incidents.

Skills

Go

TypeScript

Python

Cloud-native

Security tooling

Communication

Education

Degree in Computer Science or Information Security

Tools

Kubernetes

CI/CD pipelines

Cloud providers (AWS/GCP/Azure)

Job description

Grafana Labs is seeking a Senior Software Engineer focused on Security Assurance to join our GRC engineering team. You will build automated security observability, compliance, and control systems for a cloud-native SaaS environment.

This remote-first role emphasizes collaboration with security, engineering, and customer-facing teams, leveraging ISO, SOC 2, GDPR, and other standards while maintaining high-velocity delivery.