Engineering Manager - Grafana Application Security | EMEA | (Remote, Spain)

Role overview Lead an application security engineering team for a globally distributed observability platform used by thousands of organizations. The role centers on building security maturity through automation, strong partnerships, and influence rather than gates. You will be accountable for the security of software you do not write, in teams that do not report to you, and your success comes from making the secure path the easiest one.

Responsibilities - Lead the application security function across application, cloud, and internal tooling areas - Drive first- and third-party vulnerability management, including coordinated disclosure and embargoed fixes - Define and execute engineering strategy in partnership with security leadership and stakeholders - Run regular one-on-ones, coaching, mentoring, and continuous feedback for the team - Partner with engineering leaders to shape product strategy, roadmaps, and design reviews - Participate in major incident preparation, simulation, response, and customer communications - Review and contribute to design documents and break projects into well-scoped tasks

Requirements - Prior experience running a security engineering team in a cloud-based SaaS organization - Strong engineering background with the ability to engage in technical reviews and threat modeling - Comfort working with autonomous engineering teams and influencing without direct authority - A DevOps-oriented security philosophy favoring enablement, automation, and guardrails over roadblocks - Familiarity with public cloud providers (AWS, GCP, Azure), Kubernetes, and combined open-source plus SaaS environments - Excellent written and verbal communication, including translating security risk into business impact

Nice to have - Programming or software engineering background before transitioning into security and leadership - Working knowledge of the company's open-source observability tools

Benefits and work setup - Fully remote position, considering candidates in Spain, the UK, and Ireland - Global, asynchronous culture with transparent decision-making - 30 days of annual leave, with three reserved company-wide shutdown days - Equity in the form of RSUs to align with long-term outcomes - Defined career growth pathways, approachable leadership, and in-person onboarding