Senior Software Engineer (Security Assurance)

Join Grafana Labs as a Senior Software Engineer in Security Assurance. You will be part of the GRC engineering team, building an automated security system from the ground up. This is a fully remote position, and you will collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes. You will also develop and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements.

EUR 97,034 - 116,441

Responsibilities

• Contribuer au développement et à la mise en œuvre de programmes d'assurance sécurité automatisés pour garantir la conformité aux exigences organisationnelles et réglementaires.
• Collaborer avec des équipes interfonctionnelles pour intégrer les contrôles de sécurité dans le cycle de vie du développement logiciel et les processus opérationnels.
• Développer des systèmes, des automatisations et des méthodes d'observabilité de la sécurité pour dépasser les exigences de certification.

Requirements

• Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance
• Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
• Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus
• A degree in Computer Science, Information Security, or related field (or equivalent experience)
• Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers
• Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization
• Experience securing large-scale distributed systems running in public clouds
• Experience working with OSS communities

Preferred

• Experience in using technical automations to prove infrastructure compliance
• Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems