What You'll Be Doing

• Contribute technically on the GRC team across certifications, application, build, cloud, and supply chain security, and internal tooling development
• Develop, implement, and maintain automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX)
• Create systems and automations for security observability to advance beyond certification requirements
• Deploy security and compliance checks in ways that enable employees within daily workflows and pipelines
• Collaborate with cross-functional teams to integrate security controls into software development and operational processes
• Respond to customer security issues, alerts, and potential incidents

Requirements

• Experience developing in production with at least one programming language (Go, TypeScript, Python preferred)
• Knowledge of securing containerized, cloud-native applications, ideally with Kubernetes, and experience with multiple cloud providers
• Experience automating security and compliance processes while enabling developer and employee workflows
• Strong interpersonal skills for communicating with peers, stakeholders, auditors, and customers
• Understanding of industry security standards and certifications (ISO 27001, SOC 2, PCI DSS, NIST, GDPR) and how to apply them pragmatically
• Degree in Computer Science, Information Security, or related field, or equivalent experience

Nice to Haves

• Working knowledge of Grafana Labs open source projects and products
• Experience using observability tooling to address security problems
• Experience working with open source communities
• Experience using technical automations to prove infrastructure compliance
• Experience securing large-scale distributed systems in public clouds

Perks and Benefits

• 100% remote work with a global, collaborative culture
• Opportunity to tackle meaningful challenges in a high-growth, innovative organization
• Transparent communication and open decision-making
• Autonomy and support to innovate and ship great work
• Rooted in open source values and high-trust, low-ego culture
• Defined career growth pathways and approachable leadership
• In-person onboarding experiences to connect with fellow new colleagues
• Generous global annual leave policy with 30 days per year including company shutdown days
• Equity ownership through Restricted Stock Units (RSUs) aligning team success