Senior Software Engineer, GRC

Details

Reddit's Privacy and Compliance Engineering team builds products that support evolving regulatory requirements and establish a foundation of trust for the Reddit platform. The team works across multiple domains and technology stacks in partnership with engineering and business teams.

The GRC Software Engineer will build and improve software supporting Reddit's security and compliance programs. This includes designing, implementing, and maintaining integrations, data pipelines, scheduled workflows, and automated checks across cloud, identity, HR, finance, code, and ticketing systems. The role owns projects from discovery through launch and establishes sustainable support with engineering partners.

Responsibilities

• Own software projects from discovery through launch by defining problems with partners, agreeing on success measures, clarifying technical trade-offs, delivering solutions, and following through on results.
• Automate evidence collection across key systems supporting SOX and other compliance requirements.
• Define evidence requirements with control owners and system teams, build and validate integrations, monitor failures, and establish ongoing support.
• Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems.
• Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data from authoritative systems.
• Own authentication, data modeling, testing, monitoring, failure recovery, documentation, and maintenance.
• Design data models connecting risks, controls, assets, owners, systems, and evidence across sources with different schemas, identifiers, permissions, and data quality.
• Build automated checks to detect missing, stale, inconsistent, or out-of-policy data and route actionable failures to the appropriate owners.
• Translate control requirements and audit requests into data specifications, testable checks, and exception logic.
• Partner with control owners to validate system scope and resolve gaps.
• Collaborate with Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance teams.
• Deliver tools, monitoring, and runbooks that teams can rely on after launch.

Requirements

• 7+ years of experience in security, compliance, automation, data integration, security engineering, or a related technical field.
• Hands-on proficiency with Python, Go, or a comparable programming language and SQL, including writing, testing, reviewing, and maintaining code used by others or by operational workflows.
• Experience building API-based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats.
• Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage.
• Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services. GCP experience is helpful but not required.
• Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and integration-support runbooks.
• Practical knowledge of security and compliance controls, including translating requirements into system design, evidence, testing, and remediation.
• Experience applying one or more relevant frameworks or regulatory requirements, such as SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA, or EU NIS 2.
• Ability to earn trust and influence without authority, clarify risk and technical trade-offs, reduce partner burden, address concerns directly, and follow through on commitments.
• Ability to independently own complex projects from discovery through launch and measurable results.

Benefits

• Comprehensive healthcare benefits and income replacement programs.
• 401(k) with employer match.
• Global benefit programs supporting workspace, professional development, caregiving, and other needs.
• Family planning support.
• Gender-affirming care.
• Mental health and coaching benefits.
• Flexible vacation and paid volunteer time off.
• Generous paid parental leave.
• Eligibility for equity in the form of restricted stock units and, depending on the position offered, possible commission eligibility.

Additional Information

The position may span more than one career level. The base salary range is $190,800–$267,100 USD. Final offers may vary based on skills, depth of work experience, and relevant licenses or credentials. In select roles and locations, interviews may be recorded, transcribed, and summarized by artificial intelligence, with an option to opt out before scheduled interviews. Reddit is an equal opportunity employer and provides reasonable accommodations for qualified individuals with disabilities and disabled veterans.