HiringCafe
Join our community

26 grc engineer jobs at 21 companies in Petaluma, CA

2mo
Save
Mark Applied
Hide
GRC Engineer
Palo Alto or San Francisco
$130k-$170k/yr OnsiteAll Commitments Available
Zania
Zania: Automates enterprise risk and compliance using agentic AI teammates.
3+ YOE3–8 years in GRC, information security, risk management, audit, or enterprise tech customer success; strong frameworks knowledge (SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS); proven stakeholder management and communication; SaaS/technical product experience.
GRC frameworks, SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS
Job PostingView all
2mo
Save
Mark Applied
Hide
GRC Engineer
Foster City, California, United States
$210k-$320k/yr HybridFull Time
Replit
Replit: Cloud-based platform for building and hosting software applications.
8+ YOE8+ years in GRC or information security; deep cloud (GCP/AWS) and security architecture; strong regulatory experience; automation mindset with GRC tools.
GCP, AWS, Vanta, Drata, SOC 2, ISO 27001, PCI, HIPAA
Job PostingView all
4w
Save
Mark Applied
Hide
Senior GRC Engineer
San Francisco, California, United States
$180k-$200k/yr OnsiteFull Time
Postman
Postman: Platform for building, testing, and managing software APIs.
6+ YOE6+ years GRC experience in tech, SOC2/ISO27001/HIPAA/GDPR/CCPA/FedRAMP knowledge, proficiency in Python or JavaScript, experience integrating GRC tooling, and strong communication.
Python, JavaScript
Job PostingView all
14h
Save
Mark Applied
Hide
GRC Controls Automation Engineer
Austin or Chicago or New York City or Redwood City or San Francisco or United States
$130k-$145k/yr HybridFull Time
Box
BoxNYSE: BOX: Provides cloud-based content management and secure file sharing services.
5+ YOE5+ years in SaaS GRC or information security; GCP, AI architectures, data governance, model validation, NIST, PCI, ISO, SOC 2, communication, and process improvement experience.
GCP, AI, NIST 800-53, PCI, ISO 27x, AICPA SOC, SOC 2
Job PostingView all
2mo
Save
Mark Applied
Hide
GRC Engineer
San Mateo, California, United States
$200k-$250k/yr OnsiteFull Time
Verkada
Verkada: Sells integrated AI-powered cloud physical security hardware and software.
7+ YOE7+ years in security/IT compliance; audits (SOC 2, ISO27001); AWS experience; strong communication; able to work onsite; scripting bonus.
AWS
Job PostingView all
3w
Save
Mark Applied
Hide
Security Engineer, GRC
San Francisco or Seattle or New York City
$156k-$214k/yr HybridFull Time
Plaid
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
Strong Python and SQL, AWS and cloud security experience, Terraform and policy-as-code (OPA/Rego, Sentinel), CI/CD integration, continuous controls monitoring, GRC framework knowledge, and AI tooling experience.
Python, SQL, AWS, GitHub, Terraform, OPA/Rego, Sentinel, Mode, Claude, OpenAI, Anecdotes, Drata, Vanta, Paramify
Job PostingView all
2mo
Save
Mark Applied
Hide
Senior AI GRC Engineer
United States or San Francisco or New York City or London or Dublin or Tel Aviv or Sydney
$178k-$209k/yr RemoteFull Time
Vanta
Vanta: Automated security compliance and trust management software for businesses.
Deep expertise in AI governance, risk, and compliance; experience using AI agents and building automations; coding experience with TypeScript, Go, or Python; cloud-native security knowledge (AWS); experience with compliance programs (SOC 2, ISO).
Anthropic products, OpenAI products, LangChain products, Cursor, TypeScript, Go, Python, AWS
Job PostingView all
2mo
Save
Mark Applied
Hide
Senior GRC Lead
Vancouver or New York City or San Francisco
$154k-$192k/yr HybridFull Time
Brex
Brex: Corporate cards and spend management software for businesses.
5+ YOE5+ years in GRC or Security Engineering; strong automation; security frameworks SOC 2, PCI DSS, ISO 27001; Python and API integrations; cross-functional collaboration; cloud native; Terraform.
Python, APIs, Terraform, Tines
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Security GRC Analyst
San Mateo, California, United States
$224k-$272k/yr HybridFull Time
Roblox
RobloxNYSE: RBLX: Platform for creating and playing user-generated 3D digital experiences.
4+ YOE4+ years GRC experience, risk assessment and policy development, ability to work with engineers, knowledge of compliance frameworks and security controls.
Factor Analysis of Information Risk (FAIR), Roblox Studio
Job PostingView all
1mo
Save
Mark Applied
Hide
Security and Compliance Engineer
Bangalore or San Francisco
OnsiteFull Time
Hevo Data
Hevo Data: Automated no-code data pipeline platform for real-time analytics.
5+ YOE5+ years in security or compliance engineering; hands-on SOC 2 Type II audit ownership; cloud security (AWS/GCP/Azure); GRC tooling experience; strong written communication and policy authorship skills.
SOC 2 Type II, ISO 27001, GDPR, CCPA, AWS, GCP, Azure, Sprinto, Tugboat Logic, GRC, CI/CD, infrastructure-as-code, DevSecOps, SDLC, IAM
Job PostingView all
1mo
Save
Mark Applied
Hide
Staff+ Software Engineer, GRC Platform
San Francisco or New York City or Seattle
$405k/yr HybridFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
8+ YOE8+ years building backend systems, data pipelines, or internal platforms; proficiency in Python or Go; experience with cloud platforms and infrastructure-as-code; strong systems thinking and experience with integrations or data infrastructure.
Python, Go, AWS, GCP, Azure, Claude, ServiceNow, Vanta, Drata, OneTrust, REST APIs, webhooks, CI/CD, ELT, ETL, infrastructure-as-code, version control
Job PostingView all
2mo
Save
Mark Applied
Hide
Staff Software Engineer, Core GRC
San Francisco, California, United States
$201k-$272k/yr HybridFull Time
Drata
Drata: Automated security and compliance platform for businesses.
10+ YOE10+ yrs software eng; 3+ yrs Node.js or React; 1+ yr NestJS; CS degree or equivalent; OAuth/SCIM/OIDC/RBAC experience; cloud platforms; REST, TS/JS; CI/CD; Git.
Node.js, React, NestJS, JavaScript, TypeScript, OAuth, SCIM, OIDC, RBAC, REST, Git, CI/CD, AWS, GCP, Azure, Terraform, Pulumi, TypeORM, Jest, Redis, ElasticSearch
Job PostingView all
2mo
Save
Mark Applied
Hide
Forward Deployed Security Engineer
Seattle or San Francisco or United States
$125k-$175k/yr RemoteFull Time
Clearly AI
Clearly AI: Automates enterprise security and privacy reviews using AI.
2+ YOE2+ years in GRC, privacy, or security engineering; hands-on threat modeling, vendor risk, and security tool integrations; strong project management and customer debugging skills.
Jira, ServiceNow, Confluence, GitHub, Linear
Job PostingView all
1d
Save
Mark Applied
Hide
Senior Cloud Security Engineer - InfoSec
San Francisco or New York or Portland or United States or Canada
$167k-$208k/yr RemoteFull Time
Mercury
Mercury: Banking services and financial software designed for startup companies.
5+ YOE5+ years cloud security experience; familiarity with security frameworks, GRC, IaC, AWS; strong analytical and problem-solving skills; AWS certifications encouraged.
AWS
Job PostingView all
2mo
Save
Mark Applied
Hide
Sales Engineer - Mid-West US (OH/MN)
Ohio or Minnesota or San Francisco or Tel Aviv
OnsiteFull Time
BlinkOps
BlinkOps: Agentic security automation platform for enterprise workflows.
3+ YOE3+ years in sales/solutions engineering in cybersecurity, strong security operations knowledge, hands-on with APIs, JSON/YAML and jq, experience with SIEM/SOAR/EDR/IAM/GRC integrations, demo/POC and customer-facing skills.
APIs, JSON, YAML, jq, SIEM, SOAR, EDR, IAM, GRC, AWS, Azure, GCP, MEDDPICC, Value Selling
Job PostingView all
1mo
Save
Mark Applied
Hide
Security Engineer
San Mateo, California, United States
$160k-$210k/yr HybridFull Time
Skydio
Skydio: Develops autonomous AI drones for defense and industrial inspection.
3+ YOE3+ years engineering experience; strong coding in Python or Go; experience automating workflows and integrating systems via APIs; working knowledge of cloud (ideally AWS); participation in on-call rotation; eligibility to access export-controlled technical data.
Python, Go, AWS, Kubernetes, SCIM, SIEM, IAM/IdP, EDR, GRC, APIs, FedRAMP, SOC 2, ISO 27001, Texas RAMP, CJIS
Job PostingView all
2mo
Save
Mark Applied
Hide
Staff Trust & Assurance Engineer
San Francisco, California, United States
$261k-$305k/yr OnsiteFull Time
Kikoff
Kikoff: A fintech focused on financial security for consumers.
7+ YOE7+ years in security compliance, GRC, or technical audit; end-to-end SOC 2 Type II and PCI DSS experience; IaC and IAM; cloud-native; auditor liaison; strong written and engineering deliverables.
Git, CI/CD, Infrastructure as Code, Cloud platforms, IAM
Job PostingView all
1mo
Save
Mark Applied
Hide
Member of Technical Staff, DevSecOps
San Francisco or Europe or Australia
$180k-$280k/yr HybridFull Time
Vapi
Vapi: Build and deploy AI-powered voice agents via flexible APIs.
5+ YOE5+ years engineering experience in cloud-native SaaS; strong security experience for multi-tenant cloud environments; proficiency with AWS, Kubernetes, and Postgres; ability to write/review code and implement shift-left security.
AWS, Kubernetes, Postgres, VoIP, CI/CD, Drata, SOC 2, ISO 27001, HIPAA, GRC
Job PostingView all
2mo
Save
Mark Applied
Hide
Solution Engineer (Pre-Sales)
Los Angeles or San Francisco
$140k-$170k/yr RemoteFull Time
Zip
Zip: AI-powered intake-to-procure platform for enterprise spend management
3+ YOE3+ years mid-market B2B solutioning experience; strong solution selling, discovery, troubleshooting, integration knowledge (iPaaS, APIs/REST); ability to present to cross-functional and executive audiences.
iPaaS, APIs, REST APIs, NetSuite, Sage, Workday, Oracle, CLMs, GRC
Job PostingView all
1mo
Save
Mark Applied
Hide
Technical Lead, Compliance Engineering & Automation
Bellevue or San Francisco or McLean
$149k-$224k/yr OnsiteFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
8+ YOE3+ Mgmt8+ years in GRC, cybersecurity, or software engineering with 3+ years leading technical teams; proven experience building automation, API integrations, dashboards; proficiency in Apex, Java, SOQL, SQL, and Python; PCI and SOC 2 audit experience.
Apex, Java, Salesforce Object Query Language (SOQL), SQL, Python, Salesforce, Agentforce, LLMs, APIs
Job PostingView all

Explore Jobs

Expand Your Job Search