Lead Full Stack Security Engineering – GRC

Salesforce

. Own architecture, technical roadmap, and delivery of the Security Assurance GRC platform’s core engines .

Posted 11/3/2026full-timeUnited StatesSenior💰 $172,500 - $260,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in architecting cloud-native microservice architectures and implementing Policy as Code and Compliance as Code engines. Proficient in leading technical projects, mentoring engineers, and integrating AI tools into engineering workflows.

Highest-signal resume keywords

Cloud-Native Microservice ArchitecturePython and Java MasteryPolicy as Code ImplementationAI Tools IntegrationNIST 800-53 and ISO 27001 Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Full Stack Software EngineeringArchitectural DesignMicroservice Design PatternsData Visualization DashboardsPostgreSQL and MySQL ExpertiseDocker and KubernetesContinuous Control MonitoringFastAPI and DjangoJavaScript FrameworksAdvanced Prompt Engineering

Soft Skills

Mentoring EngineersCross-Functional CollaborationTechnical Leadership

Tools & Technologies

AWSAzureGCPCSPM ToolsSIEM SystemsSalesforceLightning Web ComponentsGitHub CopilotClaude CodeCursor

Certifications & Qualifications

CISSPCCSPCloud Security Specialty Certification

Industry Keywords

Security AssuranceGRC PlatformCompliance TelemetryAutomated Evidence CollectionSaaS PlatformsEnterprise SoftwareNIST SP 800-53SOC 2 Trust Services CriteriaPolicy Engine EvaluationAmbiguous Business Requirements

Tech Stack

Tools & technologies

AngularAWSAzureCloudDjangoDockerFlaskGoogle Cloud PlatformJavaJavaScriptKubernetesMySQLNoSQLPostgresPythonReactSpringSpring BootSpringBootTypeScriptVue.js

About the role

Key responsibilities & impact

Own architecture, technical roadmap, and delivery of the Security Assurance GRC platform’s core engines
Drive architectural decisions, technical specifications, phase planning, and execution for complex multi-system initiatives
Architect resilient cloud-native microservice architectures for compliance telemetry, automated evidence ingestion, and low-latency risk evaluation
Partner with Product Management, Security Architects, and GRC leaders on technical roadmaps, milestones, and sprint backlogs
Establish engineering standards and conduct code and architecture reviews
Enforce secure coding guidelines and CI/CD and testing benchmarks
Design and implement Policy as Code and Compliance as Code engines using OPA or custom evaluation frameworks
Integrate CSPM and EDR tools to audit infrastructure and enterprise controls
Lead automated evidence collection pipelines integrating multi-cloud environments, identity providers, security tools, CI/CD pipelines, ticketing systems, Workday, and NetSuite
Build risk analysis engines and auditing interfaces mapping technical evidence to NIST 800-53, ISO 27001, and SOC 2
Build and ship production-grade software using AI-assisted engineering practices
Design systems integrating AI agents into human workflows
Maintain shared system context containing system designs, constraints, and standards
Evaluate human- and AI-generated code for correctness, quality, security, and performance
Lead adoption of AI coding assistants including Claude, Gemini, and OpenAI APIs
Mentor senior and mid-level engineers across time zones
Lead cross-functional technical discussions in an asynchronous-first, geographically dispersed team

Requirements

What you’ll need

10 to 12+ years of professional full stack software and systems engineering experience
3+ years in a Lead, Staff, or Principal Engineer capacity leading technical projects and distributed engineering teams
Proven record taking complex SaaS platforms or enterprise software projects from architectural inception to production delivery
Ability to translate ambiguous business requirements into architecture designs, technical epics, and execution plans
Deep mastery of Python and Java
Experience with FastAPI, Django, Flask, Spring Boot, and microservice design patterns
Advanced proficiency in JavaScript or TypeScript frameworks, including React, Vue, or Angular
Experience designing scalable component libraries and complex data visualization dashboards
Expertise in PostgreSQL, MySQL, NoSQL and graph databases, distributed data processing, Docker, Kubernetes, and AWS, Azure, or GCP
Working knowledge of NIST SP 800-53, ISO/IEC 27001, and SOC 2 Trust Services Criteria
Direct experience with continuous control monitoring, automated audit trails, or policy engine evaluation such as OPA with Rego
Demonstrated AI-first approach to engineering
Experience using AI tools such as Claude Code, GitHub Copilot, Codex, and Cursor
Advanced prompt engineering skills
A related technical degree required
Security certifications such as CISSP, CCSP, or a cloud security specialty certification are advantageous
Experience with commercial GRC tools, SIEM systems, or CSPM systems is advantageous
Experience with Salesforce platform, Lightning Web Components, Apex, and SOQL is advantageous

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Incentive compensation may be available for certain roles
Equity may be available for certain roles
Reasonable accommodations during the application or recruiting process