Senior Software Engineer, Security Assurance

This is a fully remote position, open to applicants in United Kingdom, +4 more countries.

📋 Description

• Design and implement systems and tools for security observability, compliance, and control management.

• Create services and tools aimed at proactively defending systems while enhancing security visibility.

• Provide engineers and stakeholders with security guardrails and established best practices.

• Author and deploy security policies throughout the software development lifecycle (SDLC), applications, and infrastructure.

• Make technical contributions to the Governance, Risk, and Compliance (GRC) team across various areas including certifications, application security, build processes, cloud security, and supply chain security.

• Develop, implement, and sustain automated security assurance programs.

• Create systems, automation processes, and methods for achieving security observability.

• Implement security and compliance checks within employee workflows and build pipelines.

• Integrate security controls into both the software development lifecycle and operational processes.

• Address customer security concerns, respond to security alerts, and manage potential incidents.

• Work collaboratively with security engineers, full-stack developers, customer-facing teams, stakeholders, auditors, and clients.

⛳️ Requirements

• Proven experience in a production environment with proficiency in at least one programming language.

• Capable of discussing algorithms, data structures, and optimization techniques during a coding interview.

• Familiarity with securing and utilizing containerized, cloud-native applications, preferably with Kubernetes.

• Experience across multiple cloud service providers is highly advantageous.

• Background in automating security and compliance processes using various tools, scripts, and frameworks.

• Excellent interpersonal skills with the ability to communicate effectively with peers, stakeholders, auditors, and customers.

• Understanding of security frameworks, standards, and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR.

• A degree in Computer Science, Information Security, or a related discipline, or equivalent work experience.

• Familiarity with Grafana Labs open-source projects and products is a plus.

• Experience engaging with open-source software communities is a bonus.

• Experience using technical automation to validate infrastructure compliance is an advantage.

• Knowledge of securing large-scale distributed systems operating in public cloud environments is a plus.

🏝️ Benefits

• Restricted Stock Units (RSUs).

• Fully remote work opportunities within a global culture.

• Opportunities for career advancement.

• In-person onboarding experience.

• 30 days of annual leave each year.

• 3 annual leave days specifically allocated for Grafana Shutdown Days.