GRC Engineer

Cloudflare, Inc

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Austin, TX
Posted
65 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $174k
$120k most similar roles pay here $222k

This listing doesn't post a salary. Most similar roles pay $135,000–$212,500.

Based on 240 similar postings.

Employer

About Cloudflare, Inc

Cloudflare is a prominent cloud services and security company that provides content delivery network (CDN), DDoS mitigation, and Zero Trust security services to millions of internet properties.

Cloudflare, Inc currently has 190 open roles on FindRole.

Listed pay typically runs $215,000–$278,000 across 59 roles with salary data.

Most-posted roles

View all roles at Cloudflare, Inc

At a glance

TL;DR · GRC Engineer

As a GRC Engineer on the Security Governance, Risk and Compliance team, you will develop automated solutions to improve internal processes while maintaining the GRC platform. You will architect technical governance frameworks for safe autonomous AI agent deployment, ensuring workflows operate within predefined risk thresholds. Your role involves managing audit readiness for certifications like SOC 2, ISO 27001, PCI DSS, and FedRAMP by implementing automated drift detection and self-healing configurations across a global edge network. You will collaborate cross-functionally to integrate security into the company's infrastructure as a paved-road model. Required skills include experience with Infrastructure as Code (Terraform, Pulumi), Policy as Code (OPA/Rego), and programming in Python or Go. Additionally, you should be proficient in REST APIs, JavaScript, TypeScript, and React to build modern web applications and integrate disparate security tools.

What you'll do

  • Develop and implement automated solutions to improve GRC processes and operations using security, engineering, and AI tools.
  • Build and maintain modules for the internal GRC platform and related initiatives.
  • Architect and maintain a technical governance framework for the safe deployment of autonomous AI agents.
  • Ensure agentic workflows operate within defined "action gates" and predefined risk thresholds.
  • Manage audit readiness for certifications such as SOC 2, ISO 27001, PCI DSS, and FedRAMP.
  • Implement automated drift detection and self-healing configurations to maintain global network compliance.
  • Integrate security into company operations by creating a "paved-road" model where compliance is the default state.
  • Use Python, Go, or other scripting languages to automate API interactions and parse data across various tools.

What we're looking for

  • Must have 5+ years of experience in security, compliance, automation, or engineering functions in a fast-paced environment.
  • Experience designing or implementing AI-powered automation and agentic workflows is required.
  • Deep experience with Infrastructure as Code (Terraform, Pulumi) and Policy as Code (OPA/Rego) is required.
  • Proficiency in Python, Go, or other scripting languages for automation and API interactions is required.
  • Experience building modern web applications using JavaScript, TypeScript, and React is required.
  • Ability to work with REST APIs to integrate various security tools.
  • Must be authorized to receive software or technology controlled under U.S. export control laws.

More like this

Similar roles

Senior GRC Engineer

Block

San Francisco, CA 9 days ago $217,800$326,800
Python Java Kotlin Go LLM Claude SQL Snowflake AWS GCP Kubernetes Terraform Buildkite CI/CD REST APIs gRPC Protocol Buffers Event-driven architecture Policy-as-code
7+ yrs exp

Security Engineer, GRC

Plaid

San Francisco, CA +2 57 days ago $156,000$213,600
Python SQL AWS Terraform CI/CD OPA Rego Sentinel Policy-as-Code OpenAI Claude SOC 2 ISO 27001 NIST CSF FedRAMP Mode GitHub API

GRC Engineer

Apex

Austin, TX +6 15 days ago
SOC 2 NIST CSF ISO 27001 PCI DSS GLBA SQL Python API Anecdotes Vanta Drata Secureframe OneTrust ServiceNow GRC AWS Azure GCP IAM SIEM
2+ yrs exp Hybrid

GNC Engineer

Anduril Industries

Seattle, WA 94 days ago $166,000$220,000
C++ Python GNC Sensor Fusion Computer Vision VIO VSLAM HIL CI/CD Git Robotics Embedded Systems Terrain Contour Matching Map Matching State Estimation
8+ yrs exp

Staff Security Engineer, GRC

Oscar Health

New York, NY 21 days ago $245,916$286,902
GRC NIST SP 800-53 AWS Azure Compliance-as-Code Infrastructure-as-Code Policy-as-Code CMS EDE FedRAMP Risk Assessment Audit Readiness Security Engineering Cloud Security Posture Management SIEM Configuration Management
7+ yrs exp Hybrid

Lead Security Engineer, GRC

Anduril Industries

Costa Mesa, CA 168 days ago $166,000$253,000
Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp