GRC Automation Engineer for Compliance & Integrations

Reddit, Inc.; San Francisco (CA); On-site; USD 191,000 - 267,000; Full time

Benefits offered by this job

Comprehensive Healthcare Benefits and

401k with Employer Match

Global Benefit programs

Family Planning Support

Gender‑Affirming Care

Mental Health & Coaching Benefits

Flexible Vacation & Paid VolunteerTime

Generous Paid Parental Leave

Job summary

Reddit, Inc. is hiring a GRC Software Engineer to build and improve the software that supports Reddit's security and compliance programs.

You will design, implement, and maintain integrations, data pipelines, scheduled workflows, and automated checks across cloud, identity, HR, finance, code, and ticketing systems. You will own projects from discovery through launch, and collaborate with engineering and business partners to surface issues early, reduce manual work, and establish sustainable

Qualifications

• 7+ years of experience in security, compliance, automation, data integration, security engineering, or a related technical field.
• Hands-on proficiency with Python, Go, or a comparable language and SQL, including writing, testing, reviewing, and maintaining code used by others.
• Experience building API-based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats.
• Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage.
• Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services; GCP experience is helpful but not required.
• Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and runbooks for post-launch support.
• Practical knowledge of security and compliance controls and frameworks (SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA/NIS 2).
• Demonstrated ability to earn trust, influence without authority, and own complex projects from discovery through launch.

Responsibilities

• Own software projects from discovery through launch: define problem, success metrics, trade-offs, deliver the solution, and follow through.
• Lead efforts to automate evidence collection across key systems for SOX and other compliance requirements; define evidence, build integrations, monitor failures, provide ongoing support.
• Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems.
• Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data from authoritative systems; own authentication, data modeling, testing, monitoring, and maintenance.
• Design data models connecting risks, controls, assets, owners, systems, and evidence across diverse schemas and permissions.
• Build automated checks to detect missing, stale, inconsistent, or out-of-policy data and route failures to owners.
• Turn control requirements and audit requests into data specs, testable checks, and exception logic; validate scope with control owners.
• Build strong relationships across Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance; deliver tools and runbooks for post-launch use.

Skills

Python

Go

SQL

REST APIs

Airflow

Cloud platforms

CI/CD

Security/compliance

Communication

Tools

Git

Airflow

Job description

Reddit, Inc. is hiring a GRC Software Engineer to build and improve the software that supports Reddit's security and compliance programs.

You will design, implement, and maintain integrations, data pipelines, scheduled workflows, and automated checks across cloud, identity, HR, finance, code, and ticketing systems. You will own projects from discovery through launch, and collaborate with engineering and business partners to surface issues early, reduce manual work, and establish sustainable