Senior Software Engineer, Security Assurance | UK | Remote

Overview

As a Senior Software Engineer in the GRC team, you help build scalable security observability, compliance, and control tooling for a cloud-native SaaS platform. You will implement automated security programs, push for guardrails in development pipelines, and collaborate across security, engineering, and customer-facing teams. This role blends hands-on coding with shaping security maturity, in a fully remote, OSS-friendly culture. You’ll contribute to strong security posture while enabling engineers to move quickly and safely.

Pay / Benefits

• RSUs
• 100% remote/global team
• 30 days annual leave with Grafana Shutdown Days
• Open, transparent culture
• Career growth opportunities
• Flexible work environment

Responsibilities

• Build and maintain automated security assurance programs for compliance (ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, etc.)
• Develop security observability tools to monitor and defend systems
• Deploy security checks that integrate with build pipelines and daily workflows
• Collaborate with cross-functional teams to embed security controls in SDLC and operations
• Respond to security incidents, alerts, and customer issues
• Contribute to certifications, cloud, application, and supply chain security efforts
• Provide guidance on security policy deployment across SDLC and infrastructure

Key requirements

• Production programming experience (Go, TypeScript, Python; other languages okay)
• Experience with containerized, cloud-native apps and Kubernetes; multi-cloud knowledge
• Automation of security/compliance processes and tooling
• Understanding of security frameworks (ISO 27001, SOC 2, PCI-DSS, NIST, GDPR)
• Strong interpersonal and stakeholder management skills
• Degree in CS/Info Sec or related field (or equivalent experience)

• Strong communication with peers, auditors, and customers
• Collaborative, cross-functional mindset
• Disposition to learn new standards quickly
• Security automation tooling
• Security observability systems
• Cloud and container security (Kubernetes)

…