Lead Full Stack Security Engineering (GRC)

Quick Facts

• Lead full stack security engineering role focused on GRC platform architecture and delivery.

Description

Join the team building the next-generation Security Assurance Governance, Risk, and Compliance (GRC) platform. As a lead full stack engineer, you own the architecture, technical roadmap, and delivery of core engines such as policy as code, compliance as code, automated evidence collection, telemetry and alerting, and risk evaluation—while guiding distributed teams through deployment and improving how AI coding assistants are used across engineering.

Responsibilities

• Take technical ownership of complex, multi-system initiatives across the full delivery lifecycle.
• Architect resilient, cloud-native microservices for compliance telemetry ingestion and low-latency risk evaluation.
• Partner with Product Management, Security Architects, and GRC leaders to translate regulatory strategy into technical roadmaps and sprint plans.
• Define engineering standards, run high-impact code/architecture reviews, and enforce secure coding and CI/CD/testing benchmarks.
• Design and implement extensible Policy as Code and Compliance as Code using Open Policy Agent (OPA) or custom evaluation frameworks, integrated with CSPM and EDR tools.
• Build automated evidence collection pipelines across multi-cloud environments, identity providers, security tools, CI/CD, ticketing systems, and productivity apps.
• Create risk analysis engines and auditing interfaces mapping continuous evidence to NIST SP 800-53, ISO 27001, and SOC 2.
• Build production-grade software with modern engineering practices, integrating AI into the development workflow.
• Constrain AI coding assistant outputs using declarative, machine-readable rules.
• Lead adoption of AI coding assistants and mentor engineers across time zones.

Requirements

• 10–12+ years of professional full stack software and systems engineering experience, including 3+ years as a Lead/Staff/Principal Engineer.
• Experience taking SaaS/enterprise platforms from architectural inception to production delivery.
• Ability to break down ambiguous requirements into architecture designs, epics, and execution plans.
• Deep mastery of Python and Java; enterprise frameworks including FastAPI, Django, Flask, and Spring Boot.
• Advanced proficiency in modern JavaScript/TypeScript frameworks (React, Vue, Angular), including component libraries and data visualization dashboards.
• Expertise in relational databases (PostgreSQL, MySQL), NoSQL and graph databases, distributed data processing, Docker/Kubernetes, and AWS/Azure/GCP.
• Working knowledge of NIST SP 800-53, ISO/IEC 27001, and SOC 2 Trust Services Criteria.
• Direct experience implementing/evaluating policy engines (e.g., OPA with Rego).
• Bachelor’s degree in Engineering/Computer Science (or equivalent experience).

Benefits

• Benefits include time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
• Typical base salary range: $172,500–$260,100 annually (base salary only; other incentives/equity/benefits may apply).