Lead Full Stack Security (Systems & Software) Engineering (GRC)

What you'll do

• Own the architecture, technical roadmap, and delivery of the core engines for the Security Assurance GRC platform.
• Architect resilient, cloud-native microservice architectures to process large-scale compliance telemetry and run risk evaluation engines.
• Design and implement extensible Policy as Code and Compliance as Code engines using Open Policy Agent (OPA).
• Lead the design of automated evidence collection pipelines integrating multi-cloud environments, identity providers, and enterprise security tools.
• Build dynamic risk analysis engines that map continuous technical evidence against regulatory standards like NIST, ISO, and SOC 2.
• Establish engineering standards, perform high-impact code reviews, and enforce secure coding guidelines across the organization.
• Lead the adoption of AI coding assistants to improve team productivity, automate test generation, and streamline refactoring.
• Mentor senior and mid-level engineers while leading cross-functional technical discussions across a geographically dispersed team.

What we're looking for

• 10 to 12+ years of professional full stack software and systems engineering experience.
• 3+ years of experience in a Lead, Staff, or Principal Engineer capacity leading technical projects and distributed teams.
• Deep mastery of Python and Java, including frameworks such as FastAPI, Django, Flask, and Spring Boot.
• Advanced proficiency in modern JavaScript or TypeScript frameworks like React, Vue, or Angular.
• Expertise in relational databases, NoSQL, graph databases, containerization (Docker, Kubernetes), and public cloud platforms (AWS, Azure, or GCP).
• Working knowledge of NIST SP 800-53, ISO/IEC 27001, and SOC 2 Trust Services Criteria.
• Experience building systems for continuous control monitoring, automated audit trails, or policy engines like OPA with Rego.
• A related technical degree is required.