GRC Engineer
Hybrid
Posted 10d ago
Remote Work Policy
On-site
Categories
Applied AI Engineer
About the job
Security is central to Cloudflare's mission to build a better Internet. As code is pushed, it impacts millions of Internet properties running on our global network. The Security Governance, Risk and Compliance (GRC) team ensures Cloudflare has the right controls to secure systems and customer data. We collaborate with nearly every team at Cloudflare to implement controls, manage risk, and demonstrate our security posture to auditors and customers. This role involves developing automated solutions for GRC processes, integrating with security, engineering, and AI tools, and maintaining the GRC platform. A key aspect is architecting and maintaining a technical governance framework for the safe deployment of autonomous AI agents, ensuring agentic workflows operate within defined risk thresholds.
Responsibilities
- Develop and implement automated solutions to improve GRC processes and operations.
- Integrate GRC solutions with existing security, engineering, and AI tools.
- Build and maintain the GRC platform and similar initiatives.
- Architect and maintain a technical governance framework for the safe deployment of autonomous AI agents.
- Ensure agentic workflows operate within deterministic 'action gates' and predefined risk thresholds.
- Support security assessments (e.g., SOC 2, ISO 27001, PCI DSS, FedRAMP).
- Ensure global edge network compliance through automated drift detection and self-healing configurations.
- Integrate security into company processes by working with Legal, People, Engineering, and Finance teams.
Requirements
- 5+ years of experience in security, compliance, automation, or engineering in a fast-paced environment.
- Experience designing or implementing AI-powered automation and agentic workflows.
- Understanding of unique risks of non-deterministic systems and how to govern them.
- Deep experience with Infrastructure as Code (Terraform, Pulumi).
- Deep experience with Policy as Code (OPA/Rego) implementation.
- Proficient in Python, Go, or other scripting languages for automation, API interactions, and data parsing.
- Experience building modern web applications, including JavaScript/TypeScript and React.
- Ability to collaborate effectively across frontend and backend boundaries.
- Experience working with REST APIs to integrate security tools.
Benefits
- Eligibility to participate in Cloudflare's equity plan.