Information Security

Senior Software Engineer, Security Assurance | UK | Remote

Grafana Labs

Remote · Nationwide · United Kingdom

Overview

As a Senior Software Engineer on the GRC team, you will design and ship automated security assurance programs for a cloud-native SaaS platform. You’ll build security observability, compliance tooling, and guardrails that integrate into developers’ workflows. You’ll collaborate with security, engineering, and auditors to apply standards across the SDLC and infrastructure. This remote-first role offers high-velocity impact with an OSS-first culture and opportunities to shape security at scale.

Pay / Benefits
  • RSUs
  • 100% remote
  • 30 days annual leave plus Grafana Shutdown Days
Responsibilities
  • Develop automated security assurance programs to meet regulatory requirements (ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, etc.)
  • Build security observability tools and controls to proactively defend systems
  • Deploy checks and guardrails into build pipelines and daily workflows
  • Collaborate with cross-functional teams to integrate security into SDLC and operations
  • Respond to security issues, alerts, and incidents
  • Cover a range of security areas including certifications, cloud, and supply chain security
  • Contribute to internal security tooling and automation strategies
Key requirements
  • Production programming experience (Go, TypeScript, Python preferred)
  • Knowledge of securing containerized, cloud-native apps (Kubernetes) and multiple clouds
  • Experience automating security and compliance processes
  • Strong interpersonal and stakeholder communication skills
  • Understanding of security frameworks and certifications (ISO 27001, SOC 2, PCI DSS, NIST, GDPR) and applying them with minimal operational burden
  • Degree in Computer Science, Information Security, or related field (or equivalent)
  • Strong interpersonal communication
  • Collaborative mindset
  • Ability to translate security needs to non-security stakeholders
  • Go, TypeScript, Python programming
  • Kubernetes and cloud-native security
  • Security automation and compliance tooling

Reference: WJ-747_31196483

Find more on GigBlows

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.