Senior Software Engineer, Security & Compliance

Grafana; United States; Remote; USD 93,000 - 112,000; Full time

Benefits offered by this job

RSUs

Annual leave 30 days

Shutdown days

Job summary

Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join our GRC engineering team. You will build security observability, compliance, and control management systems to proactively defend our systems and provide visibility to security state.

You will collaborate across teams, deploy security policies across the SDLC, and work in a highly automated, cloud-native environment with an OSS-first mindset. This is a remote-first role with global collaboration.

Qualifications

• Production software development experience with one or more languages.
• Experience with cloud-native, containerized apps (Kubernetes preferred).
• Familiarity with security standards such as ISO 27001, SOC 2, PCI DSS, GDPR.
• Degree or equivalent experience in CS/InfoSec.
• Strong communication and stakeholder collaboration skills.

Responsibilities

• Be a technical contributor on the GRC team across certifications, app, cloud, and supply chain security.
• Develop and maintain automated security assurance programs for ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, etc.
• Build security observability, compliance tooling, and guardrails into pipelines and SDLC.
• Collaborate with cross-functional teams to integrate security controls into software delivery.
• Respond to customer security issues, alerts, and potential incidents.

Skills

Go

TypeScript

Python

Kubernetes

Cloud platforms

Security frameworks

Communication

Education

Degree in CS or InfoSec

Tools

Git

CI/CD tooling

Terraform

Job description

Grafana Labs is seeking a Senior Software Engineer, Security Assurance to join our GRC engineering team. You will build security observability, compliance, and control management systems to proactively defend our systems and provide visibility to security state.

You will collaborate across teams, deploy security policies across the SDLC, and work in a highly automated, cloud-native environment with an OSS-first mindset. This is a remote-first role with global collaboration.