Senior Software Engineer, GRC

Описание

The Privacy and Compliance Engineering team is responsible for preparing Reddit’s platforms for evolving regulatory requirements. This role will build and improve the software that supports Reddit’s security and compliance programs, designing, implementing, and maintaining integrations, data pipelines, scheduled workflows, and automated checks across various systems.

Responsibilities

• Own software projects from discovery through launch: work with partners to define the problem, agree on success measures, make technical trade-offs clear, deliver the solution, and follow through on results
• Lead efforts to automate evidence collection across key systems in scope for SOX and other compliance requirements
• Work with control owners and system teams to define evidence requirements, build and validate integrations, monitor failures, and establish ongoing support
• Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems
• Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data from authoritative systems
• Own authentication, data modeling, testing, monitoring, failure recovery, documentation, and maintenance
• Design data models that connect risks, controls, assets, owners, systems, and evidence across sources with different schemas, identifiers, permissions, and data quality
• Build automated checks that detect missing, stale, inconsistent, or out-of-policy data, and route actionable failures to the right owners
• Turn control requirements and audit requests into data specifications, testable checks, and exception logic
• Partner with control owners to validate system scope and resolve gaps
• Build strong working relationships across Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance
• Learn how systems operate and deliver tools, monitoring, and runbooks that teams can rely on after launch

Requirements

• 7+ years of experience in security, compliance, automation, data integration, security engineering, or a related technical field
• Hands-on proficiency with Python, Go, or a comparable language and SQL, including writing, testing, reviewing, and maintaining code used by other people or operational workflows
• Experience building API-based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats
• Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage
• Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services; GCP experience is helpful but not required
• Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and the runbooks needed to support an integration after launch
• Practical knowledge of security and compliance controls, including how requirements translate into system design, evidence, testing, and remediation
• Experience applying one or more relevant frameworks or regulatory requirements, such as SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA, or EU NIS 2
• Demonstrated ability to earn trust and influence without authority by listening carefully, making risk and technical trade-offs clear, reducing partner burden where possible, addressing concerns directly, and following through on commitments
• Ability to independently own complex projects from discovery through launch and measurable results

We offer

• Remote work
• Salary range: $190,800-$267,100 USD
• Comprehensive Healthcare Benefits and Income Replacement Programs
• 401k with Employer Match
• Global Benefit programs that fit your lifestyle, from workspace to professional development to caregiving support
• Family Planning Support
• Gender-Affirming Care
• Mental Health & Coaching Benefits
• Flexible Vacation & Paid Volunteer Time Off
• Generous Paid Parental Leave
• Equity in the form of restricted stock units
• Wide range of benefits to U.S.-based employees, including medical, dental, and vision insurance

Hiring process

• In select roles and locations, interviews will be recorded, transcribed and summarized by artificial intelligence (AI)
• Opportunity to opt out of recording, transcription and summarization prior to any scheduled interviews
• During the interview, the following categories of personal information will be collected: Identifiers, Professional and Employment-Related Information, Sensory Information (audio/video recording), and any other categories of personal information you choose to share
• Information will be used to evaluate applications for employment or an independent contractor role
• Personal information will not be sold or disclosed to any third party for their marketing purposes
• Any recording of your interview will be deleted promptly after making a hiring decision