Senior Software Engineer, Security Assurance | Spain | Remote

We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that's automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity. This is a very technical, hands-on keyboard software engineering, so development experience is critical.

Responsibilities

Be a technical contributor on the GRC team covering certifications, application, build, cloud, and supply chain security, and internal security tooling development; Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements; Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements; Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in daily workflows and build pipelines; Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes; Respond to customer security issues, security alerts, and potential incidents; Develop services and tools to proactively defend systems, provide visibility to the security state, and write and deploy security policies across the SDLC, applications, and infrastructure

Requirements

Experience developing in a production environment with at least one programming language; Discuss programming principles such as algorithms, data structures, and optimization (code screen); Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes; Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows; Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers; Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden; A degree in Computer Science, Information Security, or related field (or equivalent experience)

Nice to have

Working knowledge of Grafana Labs OSS projects and products; Experience in using observability tooling to solve security problems; Experience working with OSS communities; Experience in using technical automations to prove infrastructure compliance; Experience securing large-scale distributed systems running in public clouds; Experience guiding and negotiating with peers, stakeholders, customers, and auditors; Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc.)

Benefits

100% remote, global culture; In-person onboarding; Restricted Stock Units (RSUs) for all roles; Global annual leave policy of 30 days per annum, including 3 days reserved for Grafana Shutdown Days