Senior Software Engineer, GRC

5d•$190,800 - $267,100

About The Position

Reddit’s Privacy and Compliance Engineering team prepares the company’s platforms for evolving regulatory requirements and builds products that support trust across the Reddit platform. The team works closely with partners across the company and operates across dynamic, ambiguous problem spaces and multiple technical domains. The GRC Software Engineer will build and improve software supporting Reddit’s security and compliance programs. The role designs, implements, and maintains integrations, data pipelines, scheduled workflows, and automated checks across cloud, identity, HR, finance, code, and ticketing systems. Working with engineering and business partners, the engineer translates requirements into reliable tools that surface issues early and reduce manual effort. The role owns projects from discovery through launch, makes technical trade-offs, and establishes sustainable support with engineering partners. The work will help make compliance programs more effective and scalable by automating recurring assurance tasks, improving the timeliness and reliability of evidence, and surfacing gaps sooner. Success includes dependable systems that teams continue to use, less manual work, faster remediation, and clearer risk visibility.

Requirements

At least 7 years of experience in security, compliance, automation, data integration, security engineering, or a related technical field.
Hands-on proficiency with Python, Go, or a comparable language and SQL, including writing, testing, reviewing, and maintaining code used by others or by operational workflows.
Experience building API-based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats.
Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage.
Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services.
Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and runbooks for supporting integrations after launch.
Practical knowledge of security and compliance controls and how requirements translate into system design, evidence, testing, and remediation.
Experience applying one or more relevant frameworks or regulatory requirements, such as SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA, or EU NIS 2.
Ability to earn trust and influence without authority, make risk and technical trade-offs clear, reduce partner burden where possible, address concerns directly, and follow through on commitments.
Ability to independently own complex projects from discovery through launch and measurable results.

Nice To Haves

GCP experience.

Responsibilities

Own software projects from discovery through launch, defining problems and success measures with partners, clarifying technical trade-offs, delivering solutions, and following through on results.
Lead automation of evidence collection across key systems in scope for SOX and other compliance requirements; define evidence needs with control owners and system teams, build and validate integrations, monitor failures, and establish ongoing support.
Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems.
Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data from authoritative systems.
Own integration authentication, data modeling, testing, monitoring, failure recovery, documentation, and maintenance.
Design data models connecting risks, controls, assets, owners, systems, and evidence across sources with differing schemas, identifiers, permissions, and data quality.
Build automated checks for missing, stale, inconsistent, or out-of-policy data and route actionable failures to the appropriate owners.
Translate control requirements and audit requests into data specifications, testable checks, and exception logic; partner with control owners to validate system scope and resolve gaps.
Build working relationships across Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance; learn partner systems and deliver tools, monitoring, and runbooks that teams can rely on after launch.

Benefits

Comprehensive healthcare benefits and income replacement programs.
401(k) with employer match.
Global benefit programs supporting lifestyle needs, including workspace, professional development, and caregiving support.
Family planning support.
Gender-affirming care.
Mental health and coaching benefits.
Flexible vacation and paid volunteer time off.
Generous paid parental leave.
Equity in the form of restricted stock units; commission may also be available depending on the position offered.
Medical, dental, and vision insurance for U.S.-based employees.