GRC Engineer
Core
Building automated compliance controls, audit management, and security operations (SIEM/SOAR) to secure networks across cloud and on-prem environments.
Role type
GRC Engineer with Security Operations responsibilities
Builds
Automated control tests, GRC platform integrations, SIEM/SOAR detection rules, and incident response playbooks
Domain
Cybersecurity, Compliance, Cloud Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
GRC/compliance automation, control design and testing, policy writing, API integration, scripting (Python/Bash/SQL), SIEM/SOAR administration, incident response, vendor security reviews
Preferred skills
Linux administration, Terraform, policy-as-code, Mac endpoint compliance, tabletop exercise facilitation
Technologies
Vanta, Drata, Splunk, Chronicle, Panther, XSOAR, Tines, CI/CD pipelines
Responsibilities
Write and maintain security policies; build automated control tests; manage SOC 2/ISO audits; tune SIEM/SOAR rules; triage security alerts; lead incident response investigations; integrate compliance into engineering workflows
Seniority
Mid-level, hands-on IC
