[All remote jobs](https://jobicy.com/jobs.md)[![Grafana Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/11/42a3c42246467ec231dd876e92b63452.jpeg)](https://jobicy.com/company/grafana-labs.md)[Grafana Labs](https://jobicy.com/company/grafana-labs.md)

# Senior Software Engineer, Security Assurance | Sweden | Remote

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

[Apply for this job](#job-application)[View company](https://jobicy.com/company/grafana-labs.md)ShareRemote from[UK](https://jobicy.com/job-region/uk.md), [Spain](https://jobicy.com/job-region/spain.md), [Germany](https://jobicy.com/job-region/germany.md)+2 more, [Sweden](https://jobicy.com/job-region/sweden.md), [Ireland](https://jobicy.com/job-region/ireland.md)SalarySEK 775,444–930,533 / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished29 Oct 2026Apply before28 Nov 2026Listing views43Application actions5Application toolkit

## Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

## The role, at a glance.

Grafana Labs is seeking a senior hands-on engineer to build automated security assurance, compliance, and security observability capabilities for its cloud-native SaaS platform. The role combines production software development with GRC engineering, including security controls across applications, build pipelines, cloud infrastructure, and supply chains. The engineer will automate evidence and compliance workflows for standards such as ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, and TISAX while creating developer-friendly guardrails. Success requires strong programming ability, cloud and Kubernetes security knowledge, and effective collaboration with engineers, auditors, customers, and security stakeholders.

## Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

### Job Complexity

5/5EasyHard

### Pace & Pressure

4/5RelaxedFast-paced

### Autonomy Level

5/5GuidedFull ownership

### Communication Load

4/5IndependentCollaborative

AI insightThis is a senior technical security engineering role requiring both software development depth and practical security assurance expertise in a distributed cloud environment. It also demands the ability to translate regulatory and audit requirements into scalable, low-friction engineering controls.

## Salary analysis

Estimated compensation compared with the broader SEK market for similar roles.

Estimated job median (per year)Market rateSEK852,988.50SEK market range (per year)SEK780k–SEK1,000k0SEK1,100k

AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer discloses a base compensation range of SEK 775,444–930,533. The annual cadence is inferred from the compensation magnitude, senior full-time engineering scope, and Swedish market conventions because the listing does not explicitly state a pay period. The estimated Swedish annual market range for a senior security-focused software engineer is SEK 780,000–1,000,000.

## Core skills

Skills and capabilities most closely associated with this opportunity.

[Security assurance](https://jobicy.com/jobs?search_keywords=Security%20assurance.md)[GRC engineering](https://jobicy.com/jobs?search_keywords=GRC%20engineering.md)[Cloud security](https://jobicy.com/jobs?search_keywords=Cloud%20security.md)[Kubernetes security](https://jobicy.com/jobs?search_keywords=Kubernetes%20security.md)[Security automation](https://jobicy.com/jobs?search_keywords=Security%20automation.md)[Compliance automation](https://jobicy.com/jobs?search_keywords=Compliance%20automation.md)[Go](https://jobicy.com/jobs?search_keywords=Go.md)[TypeScript](https://jobicy.com/jobs?search_keywords=TypeScript.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[Security observability](https://jobicy.com/jobs?search_keywords=Security%20observability.md)[ISO 27001](https://jobicy.com/jobs?search_keywords=ISO%2027001.md)[SOC 2](https://jobicy.com/jobs?search_keywords=SOC%202.md)[NIST](https://jobicy.com/jobs?search_keywords=NIST.md)[PCI DSS](https://jobicy.com/jobs?search_keywords=PCI%20DSS.md)

Sample interview questionsHow would you design an automated control to demonstrate that production Kubernetes workloads comply with a security baseline?I would define the baseline as policy-as-code, evaluate it continuously through admission controls and scheduled scans, and collect immutable evidence centrally. I would prioritize actionable remediation messages and exception workflows so the control improves engineering behavior rather than merely producing audit findings.

Describe how you would integrate a new compliance requirement into an existing software delivery lifecycle without creating unnecessary friction.

I would first translate the requirement into concrete technical outcomes, identify existing signals and controls, and automate evidence collection wherever possible. I would then introduce checks incrementally in CI/CD, provide clear developer guidance, measure false positives, and iterate with engineering teams before enforcing hard gates.

What security considerations are most important when securing containerized applications in a public cloud?

Key areas include hardened images, dependency and vulnerability management, least-privilege identities, network segmentation, secrets handling, workload policies, runtime detection, and centralized logging. I would also ensure infrastructure and deployment configuration are version controlled and continuously evaluated against policy.

How would you respond to a customer security questionnaire that requests evidence for SOC 2 and ISO 27001 controls?

I would map each question to the relevant control owner and authoritative evidence source, using an evidence repository where possible. For gaps, I would distinguish between missing documentation and missing controls, coordinate remediation transparently, and avoid making unsupported claims to the customer.

Tell us about a time you had to influence technical stakeholders to adopt a security control.

I would explain the risk in the context of the team's goals, demonstrate how the control can be automated or embedded in existing workflows, and invite feedback on implementation details. Building a small proof of concept and measuring its impact usually helps turn a security requirement into a jointly owned engineering improvement.

Opportunity details

## About this role.

Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at [grafana.com](http://grafana.com) and follow us on [LinkedIn](https://www.linkedin.com/company/grafana-labs/) and [X](https://twitter.com/grafana).

We’re scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.

You may not meet every requirement, and that’s okay. If this role excites you, we’d love you to raise your hand for what could be a truly career-defining opportunity.

This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.

### Senior Software Engineer – Security Assurances

We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system that’s automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.

To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.

The Opportunity:

You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.

This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.

What You’ll Be Doing:

* Be a technical contributor on our GRC team covering a range of areas, including certifications, application, build, cloud, and supply chain security, and internal security tooling development
* Develop, implement, and maintain highly automated security assurance programs to ensure compliance with organizational and regulatory requirements (e.g., ISO 27001, SOC 2, GDPR, NIST, PCI-DSS, TISAX, whatever else our customers eventually throw at us)
* Develop systems, automations, and methods of security observability to push the GRC engineering organization beyond just meeting certification requirements
* Deploy security and compliance checks in an employee-enabling way (guardrails and paved roads) in their daily workflows and build pipelines
* Collaborate with cross-functional teams to integrate security controls into the software development lifecycle and operational processes.
* Respond to customer security issues, security alerts, and potential incidents

What Makes You a Great Fit:

* Experience developing in a production environment with at least one programming language. We primarily use Go, TypeScript, and Python but most languages translate well. You will take a code screen and be expected to discuss programming principles such as algorithms, data structures, and optimization
* Knowledge of using and securing containerized, cloud-native applications, ideally with Kubernetes. Experience with multiple cloud providers is a strong plus
* Experience in automating security and compliance processes using tools, scripts, and frameworks while enabling developer and employee workflows
* Strong interpersonal skills, as this position will require communication with peers, stakeholders, auditors, and customers
* Understanding of industry-recognized security frameworks, standards, and certifications, such as ISO 27001, SOC 2, PCI DSS, NIST, or GDPR, and how to apply them without added operational burden. You can gain this by reading the standards documents and audit guidance
* A degree in Computer Science, Information Security, or related field (or equivalent experience)

Bonus Points For:

* Working knowledge of Grafana Labs OSS projects and products. Experience in using observability tooling to solve security problems.
* Experience working with OSS communities
* Experience in using technical automations to prove infrastructure compliance
* Experience securing large-scale distributed systems running in public clouds

In Sweden, the base compensation range for this role is SEK 775,444 – SEK 930,533. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labs’ success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.

*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market’s defined pay range & benefits at the beginning of the process.

Why You’ll Thrive at Grafana Labs:

* 100% Remote, Global Culture – As a remote-only company, we bring together talent from around the world, united by a culture of collaboration and shared purpose.
* Scaling Organization – Tackle meaningful work in a high-growth, ever-evolving environment.
* Transparent Communication – Expect open decision-making and regular company-wide updates.
* Innovation-Driven – Autonomy and support to ship great work and try new things.
* Open Source Roots – Built on community-driven values that shape how we work.
* Empowered Teams – High trust, low ego culture that values outcomes over optics.
* Career Growth Pathways – Defined opportunities to grow and develop your career.
* Approachable Leadership – Transparent execs who are involved, visible, and human.
* Passionate People – Join a team of smart, supportive folks who care deeply about what they do.
* In-Person onboarding – We want you to thrive from day 1 with your fellow new ‘Grafanistas’ to learn all about what we do and how we do it.
* Balance is Key – We operate a global annual leave policy of 30 days per annum. 3 days of your annual leave entitlement are reserved for Grafana Shutdown Days to allow the team to really disconnect. *We will comply with local legislation where applicable.

Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.

Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.

#LI-Remote

For information about how your personal data is used once you’ve applied to a job, check out our [privacy policy](https://grafana.com/legal/applicant-and-candidate-privacy-policy/).

Show more

[Apply now >](https://jobicy.com/jobs/157829-senior-software-engineer-security-assurance-sweden-remote.md)

*

![Upload CV](data:image/svg+xml;base64,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)

### Upload your resume now

To unlock remote work opportunities and be discovered by global employers.

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

## Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Keep exploring

## Related remote jobs.

*
![Grafana Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/11/42a3c42246467ec231dd876e92b63452.jpeg)
Grafana Labs Oct 29  New

### [Senior Software Engineer, Security Assurance | UK | Remote](https://jobicy.com/jobs/157834-senior-software-engineer-security-assurance-uk-remote.md)

Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale….

*
![Grafana Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/11/42a3c42246467ec231dd876e92b63452.jpeg)
Grafana Labs Oct 29  New

### [Senior Software Engineer, Security Assurance | Spain | Remote](https://jobicy.com/jobs/157824-senior-software-engineer-security-assurance-spain-remote.md)

Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale….

*
![Ping Identity logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/09/63e8d5a6-221.png)
Ping Identity Oct 29  New

### [Principal Technical Consultant](https://jobicy.com/jobs/157782-principal-technical-consultant.md)

About Ping Identity: At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. We call this digital freedom. And it’s not just…

*
![Grafana Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/11/42a3c42246467ec231dd876e92b63452.jpeg)
Grafana Labs Oct 29  New

### [Senior Software Engineer, Security Assurance | Ireland | Remote](https://jobicy.com/jobs/157774-senior-software-engineer-security-assurance-ireland-remote.md)

Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale….

*
![Grafana Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/11/42a3c42246467ec231dd876e92b63452.jpeg)
Grafana Labs Oct 29  New

### [Senior Software Engineer, Security Assurance | Germany | Remote](https://jobicy.com/jobs/157770-senior-software-engineer-security-assurance-germany-remote.md)

Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale….

*
![Fastly logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/10/127f9e4bbbdb8767bef358a23bf7f73d.jpeg)
Fastly Oct 29  New

### [Threat Detection Analyst (Japanese Speaking)](https://jobicy.com/jobs/154166-threat-detection-analyst-japanese-speaking.md)

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and…

*
![Maze logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/f53dfbf3-221.png)
Maze Oct 29  New

### [Senior Security Engineer (Remote, EU/CET)](https://jobicy.com/jobs/154158-senior-security-engineer-remote-eu-cet.md)

About Maze Maze is the user research platform that helps companies build the right products faster by making user insights available at the speed of product development. In most companies,…

*
![Discord logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/02/WRILS-210216185819-522054.jpg)
Discord Oct 28  New

### [Threat Investigator Team Lead](https://jobicy.com/jobs/157646-threat-investigator-team-lead.md)

Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video…

*
![Veeam Software logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/f7716b71-221.jpg)
Veeam Software Oct 28  New

### [Partner Solution Architect – SAI](https://jobicy.com/jobs/157557-partner-solution-architect-sai.md)

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI…

*
![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp)
Nebius Oct 28  New

### [Senior/Staff Application Security Engineer](https://jobicy.com/jobs/157528-senior-staff-application-security-engineer.md)

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from…

[Browse all jobs](https://jobicy.com/jobs.md)