Senior Software Engineer, Security Assurance | UK | Remote

We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that's automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. This is a very technical, hands-on keyboard software engineering role, so development experience is critical.

Responsibilities

Be a technical contributor on the GRC team covering certifications, application, build, cloud, and supply chain security, and internal security tooling development; Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements; Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements; Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in daily workflows and build pipelines; Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes; Respond to customer security issues, security alerts, and potential incidents; Develop services and tools to proactively defend systems and provide visibility into security state

Requirements

Experience developing in a production environment with at least one programming language; Discussing programming principles such as algorithms, data structures, and optimization (code screen); Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes; Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows; Strong interpersonal skills for communication with peers, stakeholders, auditors, and customers; Understanding of industry-recognized security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR; A degree in Computer Science, Information Security, or related field (or equivalent experience)

Nice to have

Working knowledge of Grafana Labs OSS projects and products; Experience using observability tooling to solve security problems; Experience working with OSS communities; Experience using technical automations to prove infrastructure compliance; Experience securing large-scale distributed systems running in public clouds; Experience with multiple cloud providers (strong plus); Experience guiding and negotiating with peers, stakeholders, customers, and auditors (plus); Knowledge of security standards and frameworks such as ISO, FedRAMP, PCI-DSS, GDPR (useful)

Benefits

Restricted Stock Units (RSUs); In-person onboarding; Global annual leave policy of 30 days per annum, including 3 Grafana Shutdown Days; Defined career growth pathways; 100% remote global culture