Software Security Engineer (Remote, USA)

This is a remote position. We are looking for candidates in the USA and Canada only. 

As a Software Security Engineer on the Detection & Response Engineering team, you will work to build cutting edge security tools and processes around our advanced observability platform to catch and stop advanced threats to our platform, employees, and customers. You will work across all areas of the stack, do cutting edge development, detection research, and response automation, and contribute back these learnings to the wider security community. You will work alongside other security engineers, full-stack developers, and customer-facing teams in solving our security and detection challenges. 

Responsibilities:

• Collaboratively design, build, and maintain our internal detection systems based around the Grafana observability stack that process millions of security data points a day.
• Research and develop sophisticated detection rules to cover risks and threats across our product and corporate systems. Where applicable, contribute these detections back to the OSS community. 
• Work with product teams and other stakeholders to ensure we have effective telemetry of all existing and future products. 
• Build and maintain response tooling to streamline (and fully automate) our response activities. Write and maintain runbooks for handling what we can’t automate.
• Following a SOCless model, work with cross-functional teams to integrate telemetry, detections, and response procedures into the teams operational processes. 
• Design cutting-edge security and operations metrics to track our success and show the security value of what we do.
• Respond to security alerts, potential incidents, and customer security issues. 

Requirements:

• Solid experience with at least one programming language. We primarily use Go, TypeScript (React), and Python, but most languages translate well. You will take a code screen.
• Some experience with core security concepts and their application to modern application architectures. 
• Some experience with detection engineering concepts and practices, such asincluding the Sigma detection rule format. 
• Some experience with public clouds, container ecosystems, and running and securing applications securely running in them. 
• A motivated self starter with ample curiosity and a bias towards action.
• A clear communicator, in person, in asynchronous communication, and in technical documentation. 
• A degree in Computer Science, Information Security, or a related field (or equivalent experience).

Bonus Points:

• Working knowledge of Grafana Labs OSS projects and products. Experience in using observability (metrics, logs, traces, profiles)  tooling to solve security problems. 
• Experience working with OSS communities.
• Experience securing large-scale distributed systems running on Kubernetes in public clouds.

In the United States, the Base compensation range for this role is USD 157,000 - USD 196,000.  Actual compensation may vary based on level, experience, and skillset as assessed in the interview process. Benefits include equity, bonus (if applicable) and other benefits listed here.

*Compensation ranges are country-specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.