Senior Software Engineer, Security Assurance | UK | Remote

The OpportunityYou will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure. This is a very technical, hands-on keyboard software engineering role, so development experience is critical. What You’ll Be DoingBe a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling developmentDevelop, implement, and maintain highly automated security assurance programs to ensure compliance with organisational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX)Develop systems, automations, and methods of security observability to push the GRC engineering organisation beyond just meeting certification requirementsDeploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelinesCollaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processesRespond to customer security issues, security alerts, and potential incidentsWhat Makes You a Great FitExperience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate wellKnowledge of using and securing containerised, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plusExperience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflowsStrong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customersUnderstanding of industry-recognised security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burdenA degree in Computer Science, Information Security, or related field (or equivalent experience)Bonus Points ForWorking knowledge of Grafana Labs OSS projects and productsExperience in using observability tooling to solve security problemsExperience working with OSS communitiesExperience in using technical automations to prove infrastructure complianceExperience securing large-scale distributed systems running in public clouds