Security Engineer, GRC

📋 Description

• Own GRC Engineering at Plaid and define the discipline.
• Build codified sources of truth for controls, policies, and evidence.
• Be the engineering backbone for Security Assurance and Risk.
• Turn risk data into real-time signals for leadership.
• Pioneer compliance-as-code in the SDLC with AI-driven workflows.

🎯 Requirements

• Strong Python and SQL; API/webhook integrations.
• Owns an internal tool end-to-end with real users.
• AWS and cloud-native security controls; query cloud, GitHub, SaaS logs.
• Dashboarding with Mode to turn control data into KPIs.
• Terraform IaC and policy-as-code (OPA/Rego, Sentinel) in CI/CD.
• End-to-end continuous controls monitoring experience.

🎁 Benefits

• Comprehensive benefits: medical, dental, vision, and 401(k).