Software Security Engineer, Grafana Labs

• Solid experience with at least one programming language. We primarily use Go, TypeScript (React), and Python, but most languages translate well. You will take a code screen
• Some experience with core security concepts and their application to modern application architectures
• Some experience with detection engineering concepts and practices, such as the Sigma detection rule format
• Some experience with public clouds, container ecosystems, and running applications securely in them
• A motivated self starter with ample curiosity and a bias towards action
• A clear communicator, in person, in asynchronous communication, and in technical documentation
• Knowledge of, and ability to code is required for this role demonstrated by a degree in Computer Science or equivalent experience

Desirable

• As a Software Security Engineer on the Detection & Response Engineering team, you will work to build advanced security tools and processes around our advanced observability platform to catch and stop advanced threats to our platform, employees, and customers
• You will work across all areas of the stack, do cutting edge development, detection research, and response automation, and contribute back these learnings to the wider security community
• You will work alongside other security engineers, full-stack developers, and customer-facing teams in solving our security and detection challenges
• Collaboratively design, build, and maintain our internal detection systems based around the Grafana observability stack that process millions of security data points a day
• Research and develop sophisticated detection (as code) rules to cover risks and threats across our product and corporate systems. Where applicable, contribute these detections back to the OSS community
• Work with product teams and other stakeholders to ensure we have effective telemetry of all existing and future products
• Build and maintain response tooling to streamline (and fully automate) our response activities. Write and maintain runbooks for handling what we can’t automate
• Following a SOCless model, work with cross-functional teams to integrate telemetry, detections, and response procedures into the teams operational processes
• Design security and operations metrics to track our success and show the security value of what we do
• Respond to security alerts, potential incidents, and customer security issues