GRC Engineer

Cloudflare
Austin, Lisbon, London
Workplace: HybridFull timeFunction: CybersecurityExperience: 5+ yearsSkills: ["Curiosity","Empathy","Ability to get things done","Cross-functional collaboration"]

Build and automate security governance, risk, and compliance (GRC) processes by maintaining a GRC platform and integrating with security, engineering, and AI tooling. Architect technical governance for safe autonomous AI agent deployments using deterministic action gates and risk thresholds. Support security audits (SOC 2, ISO 27001, PCI DSS, FedRAMP) with automated drift detection and self-healing. Partner cross-functionally to embed security by default and improve Cloudflare’s security posture.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Cloudflare
Cloudflare
2 months ago

GRC Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Build and automate security governance, risk, and compliance (GRC) processes by maintaining a GRC platform and integrating with security, engineering, and AI tooling. Architect technical governance for safe autonomous AI agent deployments using deterministic action gates and risk thresholds. Support security audits (SOC 2, ISO 27001, PCI DSS, FedRAMP) with automated drift detection and self-healing. Partner cross-functionally to embed security by default and improve Cloudflare’s security posture.
Location: Austin, Lisbon, London
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Develop and implement automated solutions to improve GRC processes and operations, integrating with security, engineering, and AI tools.
  • •Build and maintain GRC platform modules and other related initiatives.
  • •Architect and maintain a technical governance framework for safe deployment of autonomous AI agents using deterministic action gates and risk thresholds.
  • •Support security assessments and treat audit readiness as a product using automated drift detection and self-healing configurations.
  • •Work cross-functionally with Legal, People, Engineering, and Finance to integrate security across the company and move compliance toward a default developer state.

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceDentalVision401kPaid LeaveFertility Benefits

Key Requirements

  • •5+ years of experience in security, compliance, automation, or engineering in a fast-paced environment.
  • •Build technical solutions to complex, messy problems, preferring automation over manual checks.
  • •Experience designing or implementing AI-powered automation and agentic workflows, including governance of non-deterministic risks.
  • •Deep experience with Infrastructure as Code (Terraform, Pulumi) and Policy as Code (OPA/Rego) to enforce security guardrails.
  • •Proficiency in Python or Go for automation, API interactions, and data parsing; experience with JavaScript/TypeScript and React is required.
Experience:5+ yearsSecurityComplianceAutomationAI
Skills:CuriosityEmpathyAbility to get things doneCross-functional collaboration
Languages:English
Tech Stack:PythonGoTerraformPulumiOPARegoREST APIsJavaScriptTypeScriptReactCloudflare WorkersR2D1Workers AI

Company Brief

Cloudflare
Provides a global network and cloud platform that delivers security, performance, and reliability services for web applications, APIs, and Internet properties, including CDN, DDoS protection, DNS, and zero-trust security solutions.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2009
WebsiteLinkedIn