Senior Security Assurance Engineer – Observability & Compliance

Grafanalabs; United States; Remote; USD 93,000 - 112,000; Full time

Benefits offered by this job

RSUs

Remote-friendly

Job summary

Grafana Labs seeks a Senior Software Engineer - Security Assurances to advance our automated security, observability, and compliance systems for a cloud-native SaaS platform. You’ll influence security across SDLC, collaborate with auditors, and drive guardrails in development workflows.

You’ll work with Go, TypeScript, and Python, applying ISO27001/SOC2/GDPR/NIST/PCI-DSS practices while scaling in a remote-first environment and across multiple clouds.

Qualifications

• Experience programming in production environments using Go, TypeScript or Python.
• Experience securing containerized, cloud-native apps, ideally with Kubernetes and multiple cloud providers.
• Familiarity with security frameworks and certifications (ISO 27001, SOC 2, PCI-DSS, GDPR, NIST).
• Degree in Computer Science, Information Security, or related field (or equivalent).

Responsibilities

• Be a technical contributor on the GRC team across certifications, application, build, cloud, and supply chain security.
• Develop, implement, and maintain highly automated security assurance programs to ensure compliance with ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, and related standards.
• Create systems and automations for security observability and control across SDLC and infrastructure.
• Embed security checks into developer workflows and build pipelines to enable secure coding practices.
• Collaborate with cross-functional teams to integrate security controls into software development and operations.
• Respond to customer security issues, alerts, and potential incidents.

Skills

Go

TypeScript

Python

Cloud security

Kubernetes

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

CI/CD tools

Job description

Grafana Labs seeks a Senior Software Engineer - Security Assurances to advance our automated security, observability, and compliance systems for a cloud-native SaaS platform. You’ll influence security across SDLC, collaborate with auditors, and drive guardrails in development workflows.

You’ll work with Go, TypeScript, and Python, applying ISO27001/SOC2/GDPR/NIST/PCI-DSS practices while scaling in a remote-first environment and across multiple clouds.