Senior Software Engineer, GRC (Security & Compliance)

Location: Remote - United States; other location: San Francisco, CA, United States.

Base salary: $190,800–$267,100 USD per year, plus potential equity and, depending on the position offered, commission.

Company

Reddit operates a large community platform built around shared interests, discussion, voting, and user-generated content.

What you will do

• Own software projects from discovery through launch, defining problems, success measures, technical trade-offs, delivery, and post-launch results.
• Automate evidence collection for SOX and other compliance requirements by defining evidence requirements, building integrations, validating results, monitoring failures, and establishing support.
• Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems.
• Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data, including authentication, data modeling, testing, monitoring, recovery, documentation, and maintenance.
• Design cross-system data models and automated checks for risks, controls, assets, owners, systems, and evidence; detect missing, stale, inconsistent, or out-of-policy data.
• Translate control requirements and audit requests into data specifications, testable checks, exception logic, monitoring, and runbooks while partnering with Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance.

Requirements

• 7+ years of experience in security, compliance, automation, data integration, security engineering, or a related technical field.
• Hands-on proficiency with Python, Go, or a comparable language and SQL, including writing, testing, reviewing, and maintaining code used by others or by operational workflows.
• Experience building API-based integrations with REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats.
• Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage.
• Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services; GCP is helpful but not required.
• Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and post-launch integration runbooks.
• Practical knowledge of security and compliance controls and how requirements translate into system design, evidence, testing, and remediation; experience with frameworks or requirements such as SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA, or EU NIS 2.
• Ability to earn trust and influence without authority, clarify risk and technical trade-offs, reduce partner burden, address concerns, follow through, and independently own complex projects through measurable results.

Culture & Benefits

• Remote work for U.S.-based employees with global benefit programs.
• Healthcare benefits, income replacement programs, and a 401(k) with employer match.
• Flexible vacation, paid volunteer time off, and generous paid parental leave.
• Family planning support, gender-affirming care, and mental health and coaching benefits.
• Workspace, professional development, and caregiving support are included among available benefits.
• Interviews may be recorded, transcribed, and summarized by AI in select roles and locations; candidates can opt out before scheduled interviews.

Hiring process

• Interview recordings, transcripts, and summaries may be used in select roles and locations, with an opt-out option before the interview.
• Reasonable accommodations are available during the interview process upon request.