About the Role
Grafana Labs develops Grafana Cloud, a fully managed observability platform used by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards, the platform provides interoperable visibility across data and brings AI to observability.
Responsibilities
•Lead the application security team across application security, cloud security, and internal tooling development
•Lead first- and third-party vulnerability management, including coordinated disclosure with external reporters and embargoed fixes
•Define, optimize, and implement the engineering strategy with security leadership, individual contributors, and business stakeholders
•Hold regular one-to-ones, coach and mentor team members, and provide continuous feedback to support engagement and high standards
•Collaborate with engineering leaders and organizational stakeholders to define and influence product strategy, roadmaps, and designs
•Engage in significant incidents, including preparation, simulation, response, and communications and notifications to affected customers
•Contribute to and review design documents for upcoming projects, ensure projects are well-defined and ready for development, and advise on breaking projects into tasks
Requirements
•Prior experience running a security engineering team
•Strong engineering background and ability to engage in technical discussions and challenge teams to reach sound technical decisions
•Comfortable working with autonomous engineering teams on technical and product decisions
•Able to manage relationships while keeping up with technical trends and shifts relevant to team challenges
•A DevOps mindset, with a preference for security enablement, automation, and guardrails over gates and roadblocks
•Familiarity with securing and operating public cloud providers (AWS, GCP, Azure), Kubernetes, and combined open-source software (OSS) and SaaS products
•Excellent written and verbal communication skills, including explaining cybersecurity concepts to technical and non-technical audiences and translating security issues into business impact
Nice to Have
•A technical background, ideally in programming or software engineering, before transitioning into security and leadership
•Working knowledge of Grafana Labs OSS projects and products
•Experience using observability tooling to solve security problems
•Experience working with OSS communities
•Experience securing large-scale distributed systems
Conditions
•Base compensation in Spain: €94,025 - €112,830; actual compensation may vary based on level, experience, and skillset assessed throughout the interview process
•All roles include Restricted Stock Units (RSUs)
•Global annual leave policy of 30 days per annum, including 3 Grafana Shutdown Days, subject to local legislation
•In-person onboarding
