Note: The job is a remote job and is open to candidates in USA. Reddit is hiring a GRC Software Engineer to build and improve software supporting its security and compliance programs. The role develops integrations, data pipelines, scheduled workflows, and automated checks, and partners with engineering and business teams to automate assurance work and surface compliance issues early.
Responsibilities
- Own software projects from discovery through launch: work with partners to define the problem, agree on success measures, make technical trade-offs clear, deliver the solution, and follow through on results
- Lead efforts to automate evidence collection across key systems in scope for SOX and other compliance requirements. Work with control owners and system teams to define evidence requirements, build and validate integrations, monitor failures, and establish ongoing support
- Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems
- Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data from authoritative systems. Own authentication, data modeling, testing, monitoring, failure recovery, documentation, and maintenance
- Design data models that connect risks, controls, assets, owners, systems, and evidence across sources with different schemas, identifiers, permissions, and data quality
- Build automated checks that detect missing, stale, inconsistent, or out-of-policy data, and route actionable failures to the right owners
- Turn control requirements and audit requests into data specifications, testable checks, and exception logic. Partner with control owners to validate system scope and resolve gaps
- Build strong working relationships across Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance. Learn how their systems operate and deliver tools, monitoring, and runbooks they can rely on after launch
Skills
- 7+ years of experience in security, compliance, automation, data integration, security engineering, or a related technical field
- Hands-on proficiency with Python, Go, or a comparable language and SQL, including writing, testing, reviewing, and maintaining code used by other people or operational workflows
- Experience building API-based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats
- Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage
- Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services
- Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and the runbooks needed to support an integration after launch
- Practical knowledge of security and compliance controls, including how requirements translate into system design, evidence, testing, and remediation
- Experience applying one or more relevant frameworks or regulatory requirements, such as SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA, or EU NIS 2
- Demonstrated ability to earn trust and influence without authority by listening carefully, making risk and technical trade-offs clear, reducing partner burden where possible, addressing concerns directly, and following through on commitments
- You can independently own complex projects from discovery through launch and measurable results
- GCP experience is helpful but not required
Benefits
- Comprehensive Healthcare Benefits and Income Replacement Programs
- 401k with Employer Match
- Global Benefit programs that fit your lifestyle, from workspace to professional development to caregiving support
- Family Planning Support
- Gender-Affirming Care
- Mental Health & Coaching Benefits
- Flexible Vacation & Paid Volunteer Time Off
- Generous Paid Parental Leave
- Equity in the form of restricted stock units
- Depending on the position offered, commission
Company Overview
Company H1B Sponsorship