Senior GRC Engineer

Block

Confirmed live 2 days ago High trust

Quick summary

Work type
On-site
Location
San Francisco, CA
Salary
$217,800–$326,800 / yr
Posted
9 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $171k
This role $272k
$106k most similar roles pay here $350k

This role pays more than 97% of similar roles. Most pay $144,350–$197,425 — the shaded band above. At the midpoint, this role pays about $272k versus about $171k for comparable roles.

Based on 240 similar postings.

Employer

About Block

Block, Inc. (formerly Square) is a financial technology company operating the Square merchant payments ecosystem, Cash App peer-to-peer payments, TIDAL music streaming, and Bitcoin-focused financial services. Industry: Financial Technology & Payments

Block currently has 53 open roles on FindRole.

Listed pay typically runs $217,800–$326,800 across 52 roles with salary data.

Most-posted roles

View all roles at Block

At a glance

TL;DR · Senior GRC Engineer

Careers - Senior GRC Engineer joins the Information Security team to transform manual governance processes into automated products. This role treats security governance as an engineering problem by building data pipelines and integrations that aggregate risk, control, and asset signals from systems like source control, identity providers, and CI/CD. You will develop policy-as-code, design agentic AI workflows using LLM reasoning for evidence analysis, and build evaluation harnesses to ensure automated governance remains accurate. The role requires proficiency in Python, Kotlin, Java, or Go, along with experience in REST APIs, gRPC, SQL, Snowflake, and infrastructure tools like Kubernetes and Terraform. You will solve the problem of dispersed compliance data by creating continuous monitoring systems that replace point-in-time audits while also helping to govern the company's internal AI systems for safety and autonomy.

What you'll do

  • Build and operate data pipelines to aggregate and normalize risk, control, and asset signals from multiple systems of record.
  • Translate security standards and compliance requirements into enforceable policy-as-code for continuous monitoring.
  • Design agentic AI workflows using LLM reasoning and deterministic layers for evidence analysis and assessment.
  • Develop evals, benchmarks, and calibration harnesses to ensure automated governance remains accurate.
  • Automate evidence collection and continuous control monitoring to replace manual audit preparation.
  • Define technical approaches and frame solutions for ambiguous, cross-team engineering problems.
  • Identify and convert manual compliance processes into scalable products in partnership with internal teams.
  • Govern the company's internal AI systems by assessing their autonomy and safety.

What we're looking for

  • You must have at least 7 years of experience building production software in backend, platform, data, or security engineering.
  • You must have multi-year experience owning a production system, including on-call duties and maintenance work.
  • You must be proficient in at least one of Python, Kotlin, Java, or Go.
  • You must have hands-on experience building with LLMs, including prompting, tool use, agents, or LLM-backed features.
  • You must have experience with integration patterns such as REST APIs, webhooks, authentication flows, and event-driven architectures.
  • You must have experience pulling, normalizing, and joining data from multiple imperfect sources.
  • You must have experience defining technical direction for ambiguous problems across team boundaries.
  • Familiarity with security or compliance frameworks like PCI DSS, SOX, SOC 2, ISO 27001, or NIST is preferred.

More like this

Similar roles

Senior Site Reliability Engineer

Block

San Francisco, CA 3 days ago $189,000$283,600
Kotlin Java MySQL Vitess DynamoDB Kubernetes Terraform Istio Envoy DataDog LaunchDarkly gRPC Protocol Buffers JSON HTTP CI/CD Event driven architecture Observability
5+ yrs exp

Senior Site Reliability Engineer

Block

New York, NY 3 days ago $189,000$283,600
Kotlin Java MySQL Vitess DynamoDB Kubernetes Terraform Istio Envoy DataDog LaunchDarkly gRPC Protocol Buffers JSON HTTP CI/CD Event driven architecture Observability
5+ yrs exp

GRC Engineer

Apex

Austin, TX +6 15 days ago
SOC 2 NIST CSF ISO 27001 PCI DSS GLBA SQL Python API Anecdotes Vanta Drata Secureframe OneTrust ServiceNow GRC AWS Azure GCP IAM SIEM
2+ yrs exp Hybrid

GRC Engineer

Cloudflare, Inc

Austin, TX 65 days ago
Python Go Terraform Pulumi OPA Rego JavaScript TypeScript React REST APIs Cloudflare Workers Workers AI Infrastructure as Code Policy as Code SOC 2 ISO 27001 PCI DSS FedRAMP
5+ yrs exp Hybrid

Security Engineer, GRC

Plaid

San Francisco, CA +2 57 days ago $156,000$213,600
Python SQL AWS Terraform CI/CD OPA Rego Sentinel Policy-as-Code OpenAI Claude SOC 2 ISO 27001 NIST CSF FedRAMP Mode GitHub API

Lead Security Engineer, GRC

Anduril Industries

Costa Mesa, CA 168 days ago $166,000$253,000
Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp