Inactive
C

Cloudflare

Secures websites and runs apps on its network

GRC Engineer

Security Governance, Risk & CompliancePosted on Jul 8
Full-time

About the Job

Requirements

  • Have 5+ years of experience in security, compliance, automation, or engineering functions in a fast-paced environment.
  • Have experience designing or implementing AI-powered automation and agentic workflows, including understanding the risks of non-deterministic systems and how to govern them.
  • Have deep experience implementing Infrastructure as Code using Terraform or Pulumi and Policy as Code using Open Policy Agent or Rego.
  • Be proficient in Python, Go, or other scripting languages for automation, API interactions, and data parsing.
  • Be comfortable working with REST APIs to integrate disparate security tools.
  • Have proven experience building modern web applications using JavaScript or TypeScript and React.
  • Have access to information protected under U.S. export control laws only with authorization to receive controlled software or technology without sponsorship for an export license.

Responsibilities

  • Develop and implement automated solutions to improve GRC processes and operations, integrating with existing security, engineering, and artificial intelligence tools.
  • Build modules and maintain the GRC platform and related initiatives.
  • Architect and maintain a technical governance framework for the safe deployment of autonomous artificial intelligence agents.
  • Ensure agentic workflows operate within deterministic action gates and predefined risk thresholds.
  • Support Cloudflare’s security assessments, including SOC 2, ISO 27001, PCI DSS, and FedRAMP.
  • Maintain audit readiness through automated drift detection and self-healing configurations across the global edge network.
  • Work cross-functionally with Legal, People, Engineering, and Finance teams to integrate security into company operations.
  • Integrate security into a paved-road model so compliance is the default state for every developer.

Desired Qualifications

  • Demonstrated passion for security and software development through personal projects, open-source contributions, or active participation in the security research community.
  • Experience building with Cloudflare’s developer platform and products such as Cloudflare Workers, R2, D1, or Workers AI.
  • Effective collaboration across frontend and backend boundaries.

About the Company

Cloudflare

Secures websites and runs apps on its network

Cloudflare operates a network that protects websites, delivers online content and runs applications closer to their users. Businesses connect websites and internal systems to its services to filter malicious traffic, control access and improve performance, with security and computing running on shared infrastructure. Developers combine application code, object storage and databases with the network used for content delivery and traffic protection. Cloudflare earns revenue from subscriptions and usage charges, with free plans for basic features and negotiated contracts for larger organizations. Cloudflare was founded in 2009 and is headquartered in San Francisco, California.

Company size
1,001-5,000
Company stage
IPO
Headquarters
San Francisco, CA
Founded
2009

Recently Posted Jobs

Explore more opportunities at Cloudflare

See more jobs