# Security Engineer, GRC

**Company:** [Plaid](https://hotfix.jobs/companies/plaid)
**Location:** San Francisco, CA, Seattle, WA, New York, NY
**Role:** Security Engineering
**Salary:** $156k – $214k/yr
**Experience:** 5+ years
**Skills:** Python, SQL, AWS, Terraform, opa, rego, sentinel, mode, CI/CD, SOC 2, ISO 27001, nist, FedRAMP
**Posted:** 2026-07-16

> Own GRC Engineering at Plaid by building a codified, continuous, data-driven compliance system. Architect pipelines for controls/evidence, implement continuous monitoring and policy-as-code in CI/CD, turn risk data into real-time signals, and scale AI/agentic workflows to eliminate manual toil.

## Job Description

## Responsibilities
- Architect GRC's Engineering Foundation: Build pipelines and codified source of truth for controls, policies, and framework mappings as structured, version-controlled data fed by live pipelines.
- Build Continuous Controls Monitoring: Automate evidence collection, control testing, and monitoring across cloud and internal systems; write and tune detection logic for drift and misconfigurations.
- Turn Data into Risk Signal: Build dashboards and SQL-driven reporting to create KPIs and real-time visibility into risk posture.
- Drive Data-Informed Risk Assessments: Conduct security and technology risk assessments, recommend mitigations, and reduce manual overhead in risk management.
- Automate Operational Toil: Eliminate recurring manual work (evidence pulls, access/vendor reviews, questionnaires, risk-register upkeep, status reporting) with durable automation.
- Shift Compliance Left with Code and AI: Embed compliance checks into CI/CD as policy-as-code, prototype self-healing policies, and scale agentic/AI-assisted workflows.
- Future-proof for Continuous Compliance: Build toward machine-readable, continuously validated evidence (e.g. FedRAMP 20x-style Key Security Indicators).

## Qualifications
- Strong Python and SQL; proven track record building API/webhook integrations.
- Experience owning an internal tool or service end-to-end (design, build, operate, maintain) with real users.
- Hands-on with AWS, cloud-native security controls, querying cloud/GitHub/SaaS logs.
- Proficiency with dashboarding/data-visualization tools (e.g. Mode).
- Experience building and operating continuous controls monitoring end-to-end (signal collection, detection logic, alerting, remediation).
- Ability to model controls, policies, and framework mappings as structured, version-controlled data.
- Hands-on with IaC (Terraform) and policy-as-code (OPA/Rego, Sentinel); embedding compliance into CI/CD.
- Proven ability to eliminate recurring operational toil with durable automation.
- Working knowledge of SOC 2, ISO 27001/27701, NIST CSF/800-53; mapping controls across frameworks.
- Experience conducting security/technology risk assessments and translating to data-driven mitigations.
- Familiarity with continuous compliance (FedRAMP 20x, machine-readable Key Security Indicators).
- Demonstrated ability to build and scale agentic/AI-assisted workflows (Claude, OpenAI).
- Ability to work independently and cross-functionally across security, infrastructure, and engineering; strong prioritization and influence without authority.

## Nice-to-Haves
- Direct experience with FedRAMP or FedRAMP 20x, or other public-sector/continuous-compliance authorizations.
- Experience with audit/compliance automation platforms (Anecdotes, Drata, Vanta, Paramify, or similar).
- Exposure to security incident response and triage.
- Experience in a high-growth fintech or financial-services environment.
- Degree in Computer Science, Cybersecurity, or related field.

## Similar roles

- [Backend Engineer, AI Security](https://hotfix.jobs/jobs/1f7b7f6c-d894-4ab2-a067-25192cf5a3c0) - Stripe - New York, NY - $157k – $286k/yr
- [Security Engineer, IAM](https://hotfix.jobs/jobs/6731592d-4782-4a28-ba04-7313a3127973) - Sentry - San Francisco, CA - $155k – $240k/yr
- [Cloud Infrastructure Security Engineer](https://hotfix.jobs/jobs/c1242456-9dcd-4b44-b9cb-d19a59d3edac) - Runpod - Remote - $152k – $175k/yr
- [Full Stack Security Engineer](https://hotfix.jobs/jobs/8663cf4e-df75-4318-9410-189edd5593cc) - Runpod - Remote - $152k – $175k/yr
- [Security Engineer](https://hotfix.jobs/jobs/be1ae539-4e2e-462f-aedd-c2ac34023a86) - Skydio - San Mateo, CA - $160k – $210k/yr

**Apply:** https://hotfix.jobs/jobs/52efef36-88bb-4013-bccb-f842e9115aae
**Canonical:** https://hotfix.jobs/jobs/52efef36-88bb-4013-bccb-f842e9115aae