Security Engineer, GRC

Plaid

Confirmed live 2 days ago High trust

Quick summary

Work type
On-site
Location
San Francisco, CASeattle, WANew York, NY
Salary
$156,000–$213,600 / yr
Posted
57 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $177k
This role $185k
$120k most similar roles pay here $226k

This role pays more than 62% of similar roles. Most pay $150,300–$204,625 — the shaded band above. At the midpoint, this role pays about $185k versus about $177k for comparable roles.

Based on 240 similar postings.

Employer

About Plaid

Plaid is a financial technology company that builds a data network powering digital finance applications, enabling consumers to securely connect their financial accounts to apps and services. Industry: Financial Technology & Data Infrastructure

Plaid currently has 35 open roles on FindRole.

Listed pay typically runs $190,800–$262,800 across 35 roles with salary data.

Most-posted roles

View all roles at Plaid

At a glance

TL;DR · Security Engineer, GRC

Security Engineer, GRC joins the Security Governance, Risk, and Compliance team to transform manual compliance processes into a scalable, engineered system. This foundational role focuses on building a codified source of truth for controls and policies while developing automated pipelines for continuous controls monitoring across cloud and internal systems. The engineer will turn raw risk data into real-time signals via SQL-driven reporting, automate operational tasks like evidence collection and vendor reviews, and shift compliance left by embedding policy-as-code into CI/CD workflows. Key technical requirements include proficiency in Python, SQL, AWS, Terraform, and OPA/Rego to manage infrastructure and security controls. The role also involves utilizing AI-assisted workflows and managing frameworks such as SOC 2, ISO 27001, and NIST to ensure the platform remains secure and compliant within a complex financial services environment.

What does a Security Engineer earn in California?

Median $196000 from 31 postings across 16 companies.

See salary data

What you'll do

  • Architect a codified source of truth for controls, policies, and framework mappings as structured, version-controlled data.
  • Build automated pipelines for continuous controls monitoring to detect configuration drift and ensure constant audit readiness.
  • Develop dashboards and SQL-driven reporting to transform raw risk data into real-time visibility for leadership.
  • Conduct data-driven security and technology risk assessments while reducing manual overhead through automation.
  • Eliminate operational toil by automating evidence collection, vendor reviews, and risk register maintenance.
  • Embed compliance checks into the CI/CD pipeline using policy-as-code and AI-assisted workflows.
  • Develop machine-readable, continuously validated evidence to meet high-level compliance standards like FedRAMP.

What we're looking for

  • Proficiency in Python and SQL for building API/webhook integrations between disparate systems.
  • Experience owning internal tools or services end-to-end, including design, construction, and maintenance.
  • Hands-on experience with AWS and cloud-native security controls, including querying cloud, GitHub, and SaaS logs.
  • Proficiency with dashboarding and data-visualization tools to translate control and risk data into KPIs.
  • Experience building continuous controls monitoring systems by collecting live signals and tuning detection logic.
  • Ability to model controls, policies, and framework mappings as structured, version-controlled data.
  • Hands-on experience with Infrastructure as Code (Terraform) and policy-as-code (OPA/Rego, Sentinel).
  • Working knowledge of SOC 2, ISO 27001/27701, and NIST CSF/800-53 frameworks.

More like this

Similar roles

Lead Security Engineer, GRC

Anduril Industries

Seattle, WA 16 days ago $166,000$253,000
Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Boston, MA 16 days ago $166,000$253,000
Python Go Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Costa Mesa, CA 168 days ago $166,000$253,000
Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

Lead Security Engineer, GRC

Anduril Industries

Washington, DC 16 days ago $166,000$253,000
Go Python Rust Terraform AWS CDK CMMC NIST 800-171 FedRAMP SOC 2 APIs Data Pipelines Kubernetes CSPM STIG ConMon Security Data Lakes Log Aggregation
6+ yrs exp

GRC Engineer

Cloudflare, Inc

Austin, TX 65 days ago
Python Go Terraform Pulumi OPA Rego JavaScript TypeScript React REST APIs Cloudflare Workers Workers AI Infrastructure as Code Policy as Code SOC 2 ISO 27001 PCI DSS FedRAMP
5+ yrs exp Hybrid

Staff Security Engineer, GRC

Oscar Health

New York, NY 21 days ago $245,916$286,902
GRC NIST SP 800-53 AWS Azure Compliance-as-Code Infrastructure-as-Code Policy-as-Code CMS EDE FedRAMP Risk Assessment Audit Readiness Security Engineering Cloud Security Posture Management SIEM Configuration Management
7+ yrs exp Hybrid