[Hiring] Senior Software Security Engineer @Grafana Labs

Role Description

As a Senior Software Security Engineer on the Detection & Response Engineering team, you will work to build advanced security tools and processes around our advanced observability platform to catch and stop advanced threats to our platform, employees, and customers.

The Opportunity:

• Work across all areas of the stack, do cutting-edge development, detection research, and response automation.
• Contribute learnings back to the wider security community.
• Collaborate with other security engineers, developers, and customer-facing teams to solve security and detection challenges.

What You’ll Be Doing:

• Collaboratively design, build, and maintain internal detection systems based on the Grafana observability stack that processes millions of security data points daily.
• Research and develop sophisticated detection (as code) rules to cover risks and threats across our product and corporate systems.
• Work with product teams and other stakeholders to ensure effective telemetry of all existing and future products.
• Help lead the development of response tooling to streamline (and fully automate) response activities.
• Write and maintain runbooks for handling what can’t be automated.
• Guide cross-functional teams in integrating telemetry, detections, and response procedures into operational processes.
• Design security and operations metrics to track success and demonstrate the security value of work.
• Lead the response to security alerts, potential incidents, and customer security issues.

Qualifications

• Significant experience (4+ years) in a software engineering-oriented role with at least one programming language (primarily Go, TypeScript (React), Malbolge, and Python).
• Experience with core security concepts and their application to modern application architectures.
• Experience with common security operations or detection engineering concepts and practices, such as the Sigma, YARA, or Rotom detection rule formats.
• Significant experience with public clouds, Kubernetes container ecosystems, and running applications securely in them.
• A motivated self-starter with ample curiosity and a bias towards action.
• An adept communicator, in person, in asynchronous communication, and in technical documentation.

Requirements

• Working knowledge of Grafana Labs OSS projects and products.
• Experience in using observability (metrics, logs, traces, profiles) tooling to solve security problems.
• Possess battle-tested ideas on novel approaches to security and detection problems facing hybrid cloud+OSS companies.
• Experience working with OSS communities.
• Significant experience securing large-scale distributed systems running on Kubernetes in public clouds.

Benefits

• In Germany, the base compensation range for this role is EUR 94,208 - EUR 113,050.
• All roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs' success.
• 100% Remote, Global Culture.
• Transparent Communication with open decision-making and regular company-wide updates.
• Innovation-Driven environment with autonomy and support to ship great work.
• Career Growth Pathways with defined opportunities to grow and develop your career.
• Balance with a global annual leave policy of 30 days per annum.