Senior Software Engineer, GRC

Reddit; United States; Remoto; USD 191.000 - 267.000; Tempo pieno

Vantaggi offerti da questo lavoro

Healthcare benefits

401k with employer match

Global benefit programs

Family planning support

Mental health & coaching

Descrizione del lavoro

Reddit is seeking a GRC Software Engineer to design, implement, and maintain integrations and data pipelines that support its security and compliance programs. You’ll own projects end-to-end, building automated checks, and collaborating with control owners and engineering partners.

You will shape data models and workflows across cloud, identity, HR, finance, and code systems, driving scalable compliance capabilities and reducing manual effort.

Competenze

• 7+ years in security, compliance, automation, data integration, or related technical field.
• Strong Python/Go and SQL skills with code used by others or in workflows.
• Experience building API-based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats.
• Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage.
• Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services.
• Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and runbooks to support an integration after launch.
• Practical knowledge of security and compliance controls, including frameworks/regulatory requirements (SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA/NIS 2).
• Ability to earn trust and influence without authority, own complex projects from discovery through launch, and deliver measurable results.

Mansioni

• Own software projects from discovery through launch with partners to define success and trade-offs.
• Lead efforts to automate evidence collection for SOX and other compliance requirements.
• Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems.
• Use APIs, scripts, and orchestration tools to collect, normalize, validate, and retain data; handle authentication, data modeling, testing, monitoring, and maintenance.
• Design data models connecting risks, controls, assets, owners, systems, and evidence across sources with different schemas.
• Build automated checks to detect missing, stale, or out-of-policy data and route failures to owners.
• Translate control requirements and audit requests into data specs, checks, and exception logic; validate scope with owners.
• Build strong relationships across Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance; deliver tools and runbooks for post-launch support.

Conoscenze

Security/Compliance

Python/Go

SQL

APIs

Airflow

Cloud platforms

CI/CD & Testing

Observability

Regulatory frameworks

Strumenti

REST APIs

Webhooks

CI/CD tooling

Version control

Authentication flows

Descrizione del lavoro

Reddit is a community of communities. It’s built on shared interests, passion, and trust, and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 130 million daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit www.redditinc.com .

Team Description

The Privacy and Compliance Engineering team is responsible for preparing Reddit’s platforms for evolving regulatory requirements. We’re building products that establish the foundation of trust in the Reddit platform, while partnering closely with teams across the company to ensure our platforms and features meet the highest standards. Engineers on this team will thrive in dynamic, ambiguous problem spaces and work across multiple domains and technology stacks.

Role Description

We’re hiring a GRC Software Engineer to build and improve the software that supports Reddit’s security and compliance programs. You will design, implement, and maintain integrations, data pipelines, scheduled workflows, and automated checks across cloud, identity, HR, finance, code, and ticketing systems. Working closely with engineering and business partners, you’ll translate requirements into reliable tools that surface issues early and reduce manual work. You’ll own projects from discovery through launch, make clear technical trade-offs, and establish sustainable support with engineering partners.

How You’ll Have Impact:

This role will make Reddit’s compliance programs more effective and scalable by building systems that help teams address requirements early and automate recurring assurance work. You’ll work with engineers and control owners to define clear requirements, deliver practical solutions, and follow through after launch. Your work will improve how controls operate, make evidence more timely and reliable, and surface gaps sooner. Success means dependable systems that teams continue to use, less manual work, faster remediation, and clearer visibility into risk.

What You’ll Do:

• Own software projects from discovery through launch: work with partners to define the problem, agree on success measures, make technical trade-offs clear, deliver the solution, and follow through on results.
• Lead efforts to automate evidence collection across key systems in scope for SOX and other compliance requirements. Work with control owners and system teams to define evidence requirements, build and validate integrations, monitor failures, and establish ongoing support.
• Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems.
• Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data from authoritative systems. Own authentication, data modeling, testing, monitoring, failure recovery, documentation, and maintenance.
• Design data models that connect risks, controls, assets, owners, systems, and evidence across sources with different schemas, identifiers, permissions, and data quality.
• Build automated checks that detect missing, stale, inconsistent, or out-of-policy data, and route actionable failures to the right owners.
• Turn control requirements and audit requests into data specifications, testable checks, and exception logic. Partner with control owners to validate system scope and resolve gaps.
• Build strong working relationships across Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance. Learn how their systems operate and deliver tools, monitoring, and runbooks they can rely on after launch.

Role Requirements:

• 7+ years of experience in security, compliance, automation, data integration, security engineering, or a related technical field.
• Hands‑on proficiency with Python, Go, or a comparable language and SQL, including writing, testing, reviewing, and maintaining code used by other people or operational workflows.
• Experience building API‑based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats.
• Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage.
• Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets‑management services; GCP experience is helpful but not required.
• Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and the runbooks needed to support an integration after launch.
• Practical knowledge of security and compliance controls, including how requirements translate into system design, evidence, testing, and remediation. Experience applying one or more relevant frameworks or regulatory requirements, such as SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA, or EU NIS 2.
• Demonstrated ability to earn trust and influence without authority by listening carefully, making risk and technical trade‑offs clear, reducing partner burden where possible, addressing concerns directly, and following through on commitments. You can independently own complex projects from discovery through launch and measurable results.
• Comprehensive Healthcare Benefits and Income Replacement Programs
• 401k with Employer Match
• Global Benefit programs that fit your lifestyle, from workspace to professional development to caregiving support
• Family Planning Support
• Mental Health & Coaching Benefits

Pay Transparency:

This job posting may span more than one career level.

In addition to base salary, this job is eligible to receive equity in the form of restricted stock units, and depending on the position offered, it may also be eligible to receive a commission. Additionally, Reddit offers a wide range of benefits to U.S.-based employees, including medical, dental, and vision insurance, 401(k) program with employer match, generous time off for vacation, and parental leave. To learn more, please visit https://www.redditinc.com/careers/ .

To provide greater transparency to candidates, we share base salary ranges for all US‑based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar stage growth companies. Final offer amounts are determined by multiple factors including, skills, depth of work experience and relevant licenses/credentials, and may vary from the amounts listed below.

The base salary range for this position is:

$190,800 - $267,100 USD

In select roles and locations, the interviews will be recorded, transcribed and summarized by artificial intelligence (AI). You will have the opportunity to opt out of recording, transcription and summarization prior to any scheduled interviews.

During the interview, we will collect the following categories of personal information: Identifiers, Professional and Employment‑Related Information, Sensory Information (audio/video recording), and any other categories of personal information you choose to share with us. We will use this information to evaluate your application for employment or an independent contractor role, as applicable. We will not sell your personal information or disclose it to any third party for their marketing purposes. We will delete any recording of your interview promptly after making a hiring decision. For more information about how we will handle your personal information, including our retention of it, please refer to our Candidate Privacy Policy for Potential Employees and Contractors .

Reddit is proud to be an equal opportunity employer, and is committed to building a workforce representative of the diverse communities we serve. Reddit is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If, due to a disability, you need an accommodation during the interview process, please let your recruiter know.

Reddit U.S. Equal Employment Information

Reddit is proud to be an equal opportunity employer, and is committed to building a workforce representative of the diverse communities we serve. To bring community and belonging to everyone in the world, Reddit’s employees must represent communities and redditors on our platform.

Our vision at Reddit is to have a workforce representative of people with different perspectives and experiences, including but not limited to, gender, race and ethnicity, sexual orientation, age, national origin, religion, and political views.

We invite you to self‑identify across the identities below so we can better understand our talent pools and assess our effectiveness in attracting and recruiting people to Reddit from all backgrounds.

Answering these questions will not impact your application, nor will this information be shared with anyone making a hiring decision. For more information, please refer to our statement here .

What gender identity do you most closely identify with? * Select...

Are you a person of transgender experience? * Select...

What sexual orientation do you most closely identify with? * Select...

Do you live with a disability (as outlined by the ADA)? * Select...

Are you a veteran/have you served in the military? * Select...

Please select up to 2 ethnicities that you most closely identify with. * Select...

By checking this box, I consent to Reddit collecting, storing, and processing my responses to the demographic data surveys above. *