Senior Full-Stack Security/GRC Platform Engineer
Core
Maintain and extend a large full-stack Governance, Risk, and Compliance (GRC) platform integrating security scanning, AI-assisted analysis, and compliance workflows.
Role type
Senior Full-Stack Security/GRC Platform Engineer
Builds
A production GRC platform with FastAPI backend, React/TypeScript frontend, PostgreSQL data model, async workers, and AI provider abstractions.
Domain
Cybersecurity, GRC, Compliance (FedRAMP/FISMA, NIST 800-53), and AI/LLM product features.
Deliverable
production ML models | product features
Required skills
Python backend development, FastAPI, Pydantic, SQLAlchemy, Alembic, async Python, React, TypeScript, PostgreSQL, Redis-backed queues, security engineering fundamentals, AI/LLM product features (RAG, embeddings, prompt design), infrastructure-as-code (Terraform), CI/CD debugging, observability.
Preferred skills
GRC/audit automation experience, generated OpenAPI SDKs, document export generation (PDF/Excel/DOCX), immutable audit logs, multi-tenant permissions.
Technologies
FastAPI, React, TypeScript, PostgreSQL, Redis, Docker Compose, Ollama, Terraform, AWS, Vite, React Router, React Query, Alembic, Pydantic, pytest.
Responsibilities
Maintain and extend FastAPI backend with hundreds of API routes; Build and refine React/TypeScript product workflows; Design and maintain SQLAlchemy models and PostgreSQL queries; Support scanner integrations and compliance mapping; Maintain AI-assisted features through provider abstractions; Debug issues across frontend state, API contracts, and deployment configuration.
Seniority
Senior, hands-on IC