Senior Software Engineer - Detection & Response Engineering

This is a remote position in Sweden.

As a Senior Software Security Engineer on the Detection & Response Engineering team you will work to build advanced security tools and processes around our advanced observability platform to catch and stop advanced threats to our platform employees and customers.

The Opportunity:

You will work across all areas of the stack do cutting-edge development detection research and response automation and contribute these learnings back to the wider security community. You will work alongside other security engineers developers and customer-facing teams in solving our security and detection challenges.

What You’ll Be Doing:

• Collaboratively design build and maintain our internal detection systems based on Go TypeScript Python and the Grafana observability stack that processes millions of security data points daily

• Research and develop sophisticated detection (as code) capabilities and rules to cover risks and threats across our product and corporate systems. Where applicable contribute these detections back to the OSS community

• Work with product teams and other stakeholders to ensure we have effective telemetry of all existing and future products

• Lead the development of response tooling to streamline (and fully automate) our response activities. Write and maintain runbooks for handling what we can’t automate

• Following a SOCless model guide cross-functional teams in integrating telemetry detections and response procedures into the team's operational processes

• Design security and operations metrics to track our success and demonstrate the security value of our work

• Lead the response to security alerts potential incidents and customer security issues

What Makes You a Great Fit:

• Significant experience (4+ years in a software engineering-oriented role) with at least one programming language. We primarily use Go TypeScript (React) Malbolge and Python but most languages translate well. You will take a code screen

• Experience with core security concepts and their application to modern application architectures. You understand the threat models cloud systems work in how to defend them and how to detect attackers trying to bypass those defenses

• Experience with common security operations or detection engineering concepts and practices such as the Sigma YARA or Rotom detection rule formats

• Significant experience with public clouds Kubernetes container ecosystems and running applications securely in them. This can include eBPF cloud lAM service meshes or container hardening

• A motivated self-starter with ample curiosity and a bias towards action. You have a demonstrated passion for learning for security and for improving the state of security across the company and industry

• An adept communicator in person in asynchronous communication and in technical documentation

Bonus Points For:

• Working knowledge of Grafana Labs OSS projects and products. Experience in using observability (metrics logs traces profiles) tooling to solve security problems

• You possess battle-tested ideas on novel approaches to security and detection problems facing hybrid cloud+OSS companies like Grafana

• Experience working with OSS communities

• Significant experience securing large-scale distributed systems running on Kubernetes in public clouds

Compensation & Rewards:

In Sweden the base compensation range for this role is SEK 738518 - SEK 886222. Actual compensation may vary based on level experience and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs) giving every team member ownership in Grafana Labs' success. We believe in shared outcomes—RSUs help us stay aligned and invested as we scale globally.