Senior Software Engineer, Security Assurance

This is a fully remote position, open to applicants in Spain, +4 more countries.

📋 Description

• Provide technical contributions to the GRC team in areas such as certifications, application security, cloud security, supply chain security, and internal security tools.

• Design, implement, and maintain automated security assurance programs to ensure compliance with organizational and regulatory standards.

• Create systems, automation processes, and security observability techniques for the GRC engineering team.

• Implement security and compliance checks as safeguards and structured pathways within workflows and build pipelines.

• Integrate security measures into the software development lifecycle and operational workflows in collaboration with cross-functional teams.

• Address customer security concerns, respond to security alerts, and manage potential incidents.

• Draft and implement security policies across the software development lifecycle, applications, and infrastructure.

• Collaborate effectively with security engineers, full-stack developers, customer-facing teams, stakeholders, and auditors.

⛳️ Requirements

• Proven experience in a production environment with proficiency in at least one programming language.

• Capability to discuss algorithms, data structures, and optimization during a coding interview.

• Familiarity with securing and utilizing containerized, cloud-native applications, preferably with Kubernetes.

• Experience in automating security and compliance processes through the use of tools, scripts, and frameworks.

• Excellent interpersonal and communication skills with peers, stakeholders, auditors, and clients.

• Knowledge of security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR.

• A degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

• Experience with programming languages such as Go, TypeScript, or Python is advantageous.

• Familiarity with multiple cloud providers is a plus.

• Ideal candidates will have experience in building, implementing, and enhancing security programs in cloud-based SaaS organizations.

• Working knowledge of Grafana Labs OSS projects and products is a bonus.

• Experience engaging with OSS communities is a bonus.

• Experience in securing large-scale distributed systems operating in public cloud environments is a bonus.

🏝️ Benefits

• Restricted Stock Units (RSUs).

• Fully remote work with a global culture.

• Opportunities for career advancement.

• In-person onboarding experience.

• 30 days of annual leave each year.

• 3 days of annual leave set aside for Grafana Shutdown Days.