What You'll Be Doing:

• Contribute technically to the GRC team across certifications, application, build, cloud, and supply chain security, and develop internal security tools
• Develop, implement, and maintain automated security assurance programs ensuring compliance with regulatory requirements like ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, and TISAX
• Create systems and automations for security observability to exceed certification requirements
• Deploy security and compliance checks integrated with daily employee workflows and build pipelines
• Collaborate with cross-functional teams to embed security controls into software development lifecycle and operational processes
• Respond to customer security issues, alerts, and potential incidents

Requirements:

• Experience developing in production environments; familiarity with programming languages such as Go, TypeScript, or Python; ability to discuss programming concepts like algorithms and data structures
• Knowledge of containerized, cloud-native applications security, ideally with Kubernetes, and experience with multiple cloud providers
• Experience automating security and compliance processes using tools, scripts, and frameworks while enabling developer workflows
• Strong interpersonal skills for effective communication with peers, stakeholders, auditors, and customers
• Understanding of security frameworks and certifications such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and ability to apply them efficiently
• Degree in Computer Science, Information Security, or a related field, or equivalent experience

Nice to Haves:

• Working knowledge of Grafana Labs open-source projects and products
• Experience with observability tooling to solve security issues
• Experience working with open-source communities
• Experience using technical automations to prove infrastructure compliance
• Experience securing large-scale distributed systems in public cloud environments

Perks and Benefits:

• 100% remote work with a global and collaborative company culture
• Opportunity to work in a scaling, innovation-driven environment with transparent communication
• Strong open-source roots and empowered, low-ego teams focused on outcomes
• Clear career growth pathways and approachable leadership
• In-person onboarding to help new team members thrive
• Generous global annual leave policy of 30 days per year including 3 Grafana Shutdown Days to encourage disconnection
• Equal opportunity employer embracing diversity and inclusion
• Compensation includes Restricted Stock Units (RSUs) promoting shared ownership and alignment