Senior Software Engineer, Security Assurance | Sweden | Remote

Grafana; United States; Remote; USD 78,000 - 94,000; Full time

Job summary

Grafana Labs is seeking a Senior Software Engineer - Security Assurance to join our GRC team. You will build automated security assurance programs, integrate security controls into SDLC, and collaborate across teams to meet standards like ISO 27001, SOC 2, GDPR.

Remote-first with candidates in multiple regions; strong automation and cloud security skills required. The role emphasizes automated certifications, defense-in-depth security, and enterprise-scale security tooling to support Grafana's

Qualifications

• Production software development in Go, TypeScript, or Python; discuss algorithms and data structures.
• Experience securing containerized cloud-native apps and Kubernetes.
• Experience with multiple cloud providers.
• Automating security and compliance using scripts and tools.
• Strong communication with peers, auditors, and customers.
• Understanding of security frameworks (ISO 27001, SOC 2, PCI DSS, NIST, GDPR).

Responsibilities

• Develop, implement, and maintain automated security assurance programs for compliance.
• Develop systems and automation for security observability.
• Deploy security checks into daily workflows and build pipelines.
• Collaborate with cross-functional teams to integrate security into SDLC and operations.
• Respond to security incidents and customer security issues.

Skills

Go

TypeScript

Python

Algorithms

Data structures

Security

Cloud

Education

Degree in Computer Science or Information Security or related field

Tools

Kubernetes

Job description

Senior Software Engineer - Security Assurances

Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X .

We’re scaling fast and staying true to what makes us different: an open‑source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation‑driven environment where transparency, autonomy, and trust fuel everything we do. You may not meet every requirement, and that’s okay.

Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data‑driven, and built from the ground up with defense‑in‑depth and self‑healing in mind. We support a highly autonomous, remote‑first, cloud‑native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context‑driven security mechanisms, default to action, and have an OSS‑first mindset. We are a 100% remote company. We believe in high‑velocity but sustainable expectations and timeframes, giving people the room to do great work.

We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.

What You’ll Be Doing:

Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI‑DSS, TISAX, whatever else our customers eventually throw at us) Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements Deploy security and compliance checks in an employee‑enabling way (guardrails and paved roads) in their daily workflows and build pipelines Collaborate with cross‑functional teams to integrate security controls into the software development lifecycle and operational processes. Respond to customer security issues, security alerts, and potential incidents

What Makes You a Great Fit:

Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization

Knowledge of using and securing containerized, cloud‑native applications, ideally with Kubernetes.

Experience with multiple cloud providers is a strong plus

Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows

Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers

Understanding of industry‑recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance A degree in Computer Science, Information Security, or related field (or equivalent experience)

Bonus Points For:

Working knowledge of Grafana Labs OSS projects and products.

Experience in using observability tooling to solve security problems.

Experience working with OSS communities

Experience in using technical automations to prove infrastructure compliance

Experience securing large‑scale distributed systems running in public clouds

In Sweden, the base compensation range for this role is SEK 775,444 - SEK 930,533 . Actual compensation may vary based on level, experience, and skillset a