Senior Software Engineer, Security Assurance | Spain | Remote
Senior engineer on Grafana Labs' GRC/security assurance team, building automated compliance and security observability systems (ISO 27001, SOC 2, GDPR, PCI-DSS) and deploying guardrails and paved roads across the SDLC and cloud infrastructure. Hands-on software development, primarily in Go, TypeScript, or Python, with Kubernetes/cloud-native environments; fully remote role.
- Compensation
- €83K–€99.6K / yr
- Location
- Spain (Remote)
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Software engineering
- Posted
Skills
Must have
- Experience developing in a production environment with at least one programming language (they primarily use Go, TypeScript, and Python)
- Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes
- Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
- Strong interpersonal skills for communicating with peers, stakeholders, auditors, and customers
- Understanding of industry-recognized security frameworks and standards such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR
- Degree in Computer Science, Information Security, or related field (or equivalent experience)
Nice to have
- Experience with multiple cloud providers
- Experience building and improving the maturity of security programs in Cloud-based SaaS organizations
- Experience guiding and negotiating with peers, stakeholders, customers, and auditors
- Working knowledge of Grafana Labs OSS projects and products; using observability tooling to solve security problems
- Experience working with OSS communities
- Experience using technical automations to prove infrastructure compliance
- Experience securing large-scale distributed systems running in public clouds
Full description
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at and follow us on LinkedIn and X.
We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
Senior Software Engineer - Security Assurances
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.