GRC Engineer

Stack

Responsibilities

• ▹Develop and implement automated solutions to improve GRC processes and operations, integrating with existing security, engineering, and AI tools; build and maintain modules on the GRC platform
• ▹Architect and maintain a technical governance framework for the safe deployment of autonomous AI agents, including deterministic 'action gates' and predefined risk thresholds
• ▹Support Cloudflare's security assessments (e.g., SOC 2, ISO 27001, PCI DSS, FedRAMP), treating 'audit readiness' as a product with automated drift detection and self-healing configurations
• ▹Work cross-functionally with Legal, People, Engineering, and Finance to integrate security into the company, moving from gatekeeping toward a paved-road model where compliance is the default

Requirements

• ▹5+ years of experience in security, compliance, automation, or engineering functions in a fast-paced environment
• ▹A builder mindset: enjoys building technical solutions to complex, messy problems, preferring to script a fix once over manually checking a box twice
• ▹Experience designing or implementing AI-powered automation and agentic workflows, understanding the risks of non-deterministic systems and how to govern them
• ▹Deep experience with Infrastructure as Code (Terraform, Pulumi) and Policy as Code (OPA/Rego)
• ▹Proficient in Python, Go, or other scripting languages for automation, API interactions, and data parsing; comfortable with REST APIs
• ▹Proven experience building modern web applications with JavaScript/TypeScript and React, collaborating across frontend and backend

Nice to have

• ▹Demonstrated passion for security and software development: personal projects, open-source contributions, active participation in the security research community
• ▹Experience building with Cloudflare's developer platform (e.g., Cloudflare Workers, R2, D1, Workers AI)

Soft skills

What we offer

• ▹A complete benefits package including medical, dental, and vision insurance, a 401(k) plan with company match, flexible paid time off, and fertility & family-forming benefits

About the company

Cloudflare's mission is to help build a better Internet. The company operates one of the world's largest networks, protecting and accelerating internet applications for customers ranging from individual bloggers to Fortune 500 companies — without added hardware, installed software, or code changes. Cloudflare has been named to Entrepreneur Magazine's Top Company Cultures list and ranked among Fast Company's World's Most Innovative Companies. Through initiatives like Project Galileo and the Athenian Project, and free services such as the 1.1.1.1 DNS resolver, Cloudflare also works to protect civil society, journalists, and election infrastructure online.