Jobs
>
Toronto

    Senior Security Engineer, Security Assurance - Toronto, Canada - Grafana Labs

    Grafana Labs
    Grafana Labs Toronto, Canada

    2 weeks ago

    Default job background
    Description

    This is a remote position and we are looking for candidates in Canada Eastern timezones.

    About the team

    The Security team advances Grafana's overall security posture through critical initiatives and coordination of large security projects. We build technologies, tools, and processes to enable engineering squads to better develop secure software, protect customer and employee data, deploy systems with appropriate security controls, and securely operate a remote workforce.

    We are building a security system that's automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. This system will support a highly autonomous, remote-first, cloud-native organization. We're taking the best of open-source and commercial tooling and making them talk to each other to arrive at some very special outcomes. We also want to open-source as much of our work as possible to security practitioners.

    To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company.

    For all that, we believe absolutely in agreeing on high-velocity but reasonable expectations and timeframes and giving people the room to do great work in a setting that prioritizes health, happiness, and work-life balance.

    Role

    The Senior Security Assurance Engineer will collaborate with teams in engineering, security, cloud platforms, information technology, vendor management, and other stakeholders to articulate security policies, implement continuous monitoring, automate workflows, and configure alerts on policy failures.

    Ideally, you would be familiar with operating in a cloud-native, remote organization. This is an opportunity to help implement a security strategy and build the underlying platforms and workflows.

    You will get to work on expanding the capabilities of our asset intelligence and governance program, security posture monitoring, compliance automation, customer security observability automation, and supplier security monitoring. Think about all the layers to build observability for system uptime, but now extending that to other layers of security that impact confidentiality and integrity (encryption, access control, incident response, etc.).

    While deep knowledge of security standards and frameworks is essential for this role, you should also have provable experience automating security posture management, automating repetitive processes, and maximizing the suite of Grafana products to build self-serve security posture observability. You will work alongside other security engineers, full-stack developers, and customer-facing teams.

    This is an individual contributor role reporting to the Director of Security Assurance.

    Responsibilities

    A successful candidate in this role would be able to:

  • Work autonomously to develop, build, and roll out information, cyber, open source, and cloud security governance frameworks.
  • Design, build, launch, and scale the asset intelligence & governance program on Grafana.
  • Establish a cadence for security program reviews, support existing accreditations, and identify strategic maturity opportunities for compliance.
  • Design and deliver monthly technology and security risk management workshops.
  • Build reasonable and self-serve partnerships with cross-functional stakeholders who are decision-makers and contributors to security initiatives.
  • Socialize and provide awareness of policies, standards, processes, and controls with relevant stakeholders.
  • Serve as the security SME to partner with engineering and operations teams on the business continuity and disaster readiness program.
  • Design, build, and manage Security GRC and Disaster Readiness reporting metrics and dashboards.

    • What you'll bring to the role

    This role would be a good fit for you if you:

  • Are comfortable working in a remote-first company and understand the importance of adapting and contextualizing the security controls.
  • Enjoy learning, growing, and supporting others to do the same.
  • Be very comfortable with at least one scripting language and a query language like SQL.
  • Enjoy navigating cloud-native environments and building automated processes for security posture management, compliance engineering, and continuous controls monitoring (indicative platforms and tools include GCP, AWS, Azure, Kubernetes, cloudquery, Grafana, LogicGate, Secureframe, Jira, ServiceNow GRC, , Drata, Vanta).
  • Have some experience working with Platform and Security to scope, operationalize, and scale Business Impact Assessments (BIAs), Business Continuity Management Systems (BCMS), and Disaster Readiness Strategies for cloud-first companies.
  • Know how to define a project plan, milestones, and key performance indicators to determine the effectiveness of your work delivery.
  • Enjoy working on complex solutions – Grafana is a highly technical solution with avid followers who rely on it everyday and care deeply about their workflows.
  • Enjoy working autonomously. While we defer to collaboration and teamwork, you should enjoy taking a problem and autonomously designing the solution, engaging the right stakeholders, and demonstrating the "own it" mindset to run through implementation.
  • Have an interest in Grafana's stack and a desire to contribute to our open-source foundations - We love dogfooding and giving back
  • Are able to communicate clearly in written and spoken English.
  • Can create impact in a pragmatic, structured, simple and quick way.

    • Education

  • BS/MS degree in engineering, computer science, or information security, or equivalent experience.
  • CISSP, CISA, CISM, and cloud security solutions are a plus.

    • In Canada, the Base compensation range for this role is CAD 165,882 - CAD 199,058. Actual compensation may vary based on level, experience, and skillset as assessed in the interview process. Benefits include equity, bonus (if applicable) and other benefits listed .

    *Compensation ranges are country-specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific market's defined pay range & benefits at the beginning of the process.

  • Street Context

    Junior Security Assurance Analyst

    3 weeks ago

    Street Context Toronto, Canada

    Are you passionate about information security and eager to kickstart your career in the field? Street Context is seeking a motivated individual to join our security team as a Junior Security Assurance Analyst. · In this role, you will play a crucial part in safeguarding our organ ...

  • Grafana Labs

    Senior Full Stack Engineer, Security Assurance

    2 weeks ago

    Grafana Labs Toronto, Canada

    This is a remote position. We are looking for candidates in Canadian time zones. · There are more than 700,000 active installations of Grafana around the globe, monitoring everything from beehives to climate change in the Alps. The instantly recognizable dashboards have been spot ...

  • Oxford Properties

    Compliance Assurance Analyst

    2 weeks ago

    Oxford Properties Toronto, Canada

    Why join us? · Are you looking to join an innovative, global real estate company who builds communities and connects people to exceptional places? If so, we would love to tell you our story. · At Oxford, our culture is truly one of a kind. Across business lines and around the wor ...

  • Securiguard

    Quality Assurance Coordinator

    1 week ago

    Securiguard Toronto, Canada

    Securiguard is seeking a diligent and detail-oriented individual to fill the role of Quality Assurance Coordinator - Retail Security. This pivotal position will oversee a diverse range of critical tasks, including compliance activities and audits for Securiguard's retail security ...

  • Bechtel

    Program Assurance Manager 1

    1 week ago

    Bechtel Toronto, Canada

    **Requisition ID: 275106** · - ** Relocation Authorized: National/International - Family**: · - ** Telework Type: Full-Time Office/Project**: · - ** Work Location: Toronto, ON** · Since 1898, we have helped customers complete more than 25,000 projects in 160 countries on all seve ...

  • Ontario Securities Commission

    Quality Assurance Analyst

    1 week ago

    Ontario Securities Commission Toronto, Canada

    **Quality Assurance Analyst** · **Information Services Branch** · **Permanent, Full-Time** · **File #22-189** · The **Ontario Securities Commission (OSC)** is the statutory body responsible for regulating Ontario's capital markets in accordance with the mandate established in the ...

  • Ontario Securities Commission

    Quality Assurance Analyst

    2 weeks ago

    Ontario Securities Commission Toronto, Canada

    **Quality Assurance Analyst** · **Information Services Branch** · **Permanent, Full-Time** · **File #23-35** · **Who We Are** · The **Ontario Securities Commission (OSC)** is the statutory body responsible for regulating Ontario's capital markets in accordance with the mandate es ...

  • Arup

    Rail Systems Assurance and Rams Manager

    2 weeks ago

    Arup Toronto, Canada

    Dedicated to sustainable development, Arup is a collective of designers, consultants and experts working globally. Founded to be humane and excellent, we collaborate with our clients and partners using imagination, technology and rigor to shape a better world. · We collaborate wi ...

  • Ontario Securities Commission

    Quality Assurance Analyst Opportunities

    2 weeks ago

    Ontario Securities Commission Toronto, Canada

    **Quality Assurance Analyst Opportunities** · **Information Services Branch** · **Permanent, Full-Time** · **File #22-132** · The **Ontario Securities Commission (OSC)** is the statutory body responsible for regulating Ontario's capital markets in accordance with the mandate esta ...

  • Richardson Wealth

    Quality Assurance Analyst

    2 weeks ago

    Richardson Wealth Toronto, Canada

    **Employment Status**: · Permanent Full-Time · **Location**: · Toronto, ON · **Department**: · IT Development · **Reporting To**: · Manager, Quality Assurance · **Job Id**: · ITD - 024 · **Job Level**: · L4 · **Seniority Level**: · Associate · **Position Overview**: · This positi ...

  • Bantrel

    Delivery Assurance Supervisor

    3 weeks ago

    Bantrel Toronto, Canada

    We are currently seeking a qualified **Delivery Assurance Supervisor **to join our team, based out of **Toronto, ON**. The Delivery Assurance Supervisor will be responsible for coordinating all elements concerning assurance demonstration and evidence to ensure verification & vali ...

  • Hitachi Rail STS Canada, Inc.

    Chief Security Officer

    3 weeks ago

    Hitachi Rail STS Canada, Inc. Toronto, Canada

    **Description** · Who We Are · **Hitachi Rail** is a fully integrated, global provider of rail solutions across rolling stock, signaling, service & maintenance, digital technology and turnkey. With a presence in 38 countries across three continents and over 13,000 employees, our ...

  • State Street

    Cyber and Data Analytics Audit, Assistant Vice

    3 weeks ago

    State Street Toronto, Canada

    Who we are looking for · Why this role is important to us · The team you will be joining plays an important role in the overall success of the organization. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance ...

  • State Street

    Quality Assurance for IT Audit, Assistant Vice

    1 week ago

    State Street Toronto, Canada

    Who we are looking for · Why this role is important to us · The team you will be joining plays an important role in the overall success of the organization. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance ...

  • Manulife

    Manager, Strategy and Governance

    3 weeks ago

    Manulife Toronto, Canada

    **_We are a _**_leading financial services provider committed to making decisions easier and lives better for our customers and _**_colleagues around the world. From our environmental initiatives to our community investments, we lead with values throughout our business. _**_To he ...

  • Pala Interactive

    Quality Assurance Analyst

    3 weeks ago

    Pala Interactive Toronto, Canada

    **THE POSITION** · The Quality Assurance Analyst will be responsible to build test cases based on requirements, implement the test cases and report issues using the ticketing system. The QA analyst will perform functional, regression, performance, security and exploratory testing ...

  • Ontario Securities Commission

    Information Services Summer Student

    3 weeks ago

    Ontario Securities Commission Toronto, Canada

    **Information Services Summer Student** · **Information Services Branch** · **May - August 2023** · **Job Code #22-157** · The Ontario Securities Commission (OSC) is the statutory body responsible for regulating Ontario's capital markets in accordance with the mandate established ...

  • Nuclear Waste Management Organization (NWMO)

    Geoscience Database Analyst

    2 weeks ago

    Nuclear Waste Management Organization (NWMO) Toronto, Canada

    **Location** · Toronto · **Employment Category** · Fixed Term · **Department** · Geoscience · **Job Reference** · 10208 · The Nuclear Waste Management Organization (NWMO) is a not-for-profit organization tasked with the safe, long-term management of Canada's used nuclear fuel ins ...

  • City of Toronto

    Project Manager Tw

    2 weeks ago

    City of Toronto Toronto, Canada

    **Job ID**: 25223 · **Job Category**:Project Management · **Division & Section**:Toronto Water, TW Customer & Technical Support · **Work Location**:50 Tiffield Rd, Scarborough, ON M1V 5B7 · **Job Type & Duration**:Permanent, Full-Time Vacancy · **Salary**:$93, $119,274.00, TM2241 ...

  • Trend Micro

    Associate Vulnerability Researcher

    2 weeks ago

    Trend Micro Toronto, Canada

    Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, world-leading global threat research and intelligence, and continuous innovation, our cybersecurity platform protects hundreds of tho ...