Senior Software Engineer - Privacy and Risk

Reddit is growing fast, and the Privacy and Risk Security Engineering Team is scaling up with the rest of the org. We are building foundational capabilities, and have ground to cover in all privacy, risk, and compliance functions.

The Reddit Privacy and Risk Security Engineering team is rapidly developing and looking for an Information Security Engineer with a focus on Privacy. This is an exciting opportunity to get in and have an outsized impact on a highly skilled and motivated team. We look for humble experts with a relentlessly resourceful and entrepreneurial, “can do” view of privacy and compliance. We want to deliver facts and not FUD to the business to enable Reddit to manage risk more effectively. Culture is important to us, and a learning and developing mentality is vital regardless of the work assigned. 

As an Information Security Engineer, you will be accountable for developing solutions to close gaps identified related to security, privacy, compliance, assurance, and business policy and to build the next generation of data privacy safeguards to continue to evolve how we handle Redditor’s data and preserve anonymity as a core component of what makes Reddit unique. You will partner closely with cross-functional stakeholders in Legal, Policy, and Trust and Safety teams to ensure a holistic view of privacy, security, risk, and compliance. 

Location: US remote-friendly

Reddit is continuing to grow our teams with the best talent. This role is remote-friendly. If you happen to live close to one of our physical office locations, our doors are open for you to come into the office as often as you'd like. 

Projects you will work on:

• Design, build, and implement effective technical solutions that enable privacy, compliance, and data protection by design and by default

• Translate privacy and compliance rules and policies into robust, scalable, reusable solutions that protect user and advertisers while enabling safe, transparent use of data

• Integrate privacy by design into the software development lifecycle, including system requirements collection, architecture, design, development, and testing

• Partner cross-functionally with Legal, Policy Trust and Safety teams to understand compliance requirements and translate into actionable product requirements

• Automate ad hoc processes and scripts to create efficiency and consistency

• Understand the unique requirements related to advertising products and services from the business and advertiser perspective

Ideal candidates:

• 7+ years of hands-on experience in working with privacy, security, compliance and assurance policy applications in the software development lifecycle

• 3-5 years of hands-on experience building clean, maintainable, and well-tested automated scripts or processes to support privacy, risk, or data governance-type projects.

• Working knowledge of large-scale cloud storage and data architecture related to privacy practices (for example: limiting data use, complying with data retention and deletion, encrypting data, minimum data access principles)

• Comfortable navigating unfamiliar tech stacks and working with new languages and technologies

• Experience with any of the following:  Python, Java, Go or JavaScript / TypeScript and SQL

• Understanding of practical applications of privacy by design, including data protection and/or cryptography

• Experience with data privacy requirements stemming from regulatory and legislative mandates, including CCPA, GDPR, and state data breach notification laws

• Ability to effectively prioritize and execute tasks in a high-pressure environment

• Ability to learn and research new technologies and standards rapidly, assess them for privacy exposures, and drive changes to enhance privacy

• Strong interpersonal, consultative, consensus-builder, and issue-resolution skills

• Proven verbal and written communication skills

• Capable of conducting data privacy compliance reviews and audits.  

• Ability to review, analyze, and organize documentary and factual evidence   

• Ability to analyze and assess data privacy control capabilities and provide remediation recommendations

 Personal Skills:   

• Excellent analytical, problem-solving, technical writing, verbal communication, and interpersonal skills

• Excellent communication skills with the ability to interact with teams, be a thought leader, and drive innovation

• Humble expert with a sense of urgency

• Skilled at taking complex topics and making them simple

• A team focus with an ability to work in a matrixed organization

• The ability to exhibit sound judgment and domain knowledge for multiple areas of expertise within the specialized discipline. 

• Work independently and own projects entirely, both within the department as well as cross-functionally

• Ability to work on and continuously deliver on numerous competing priorities simultaneously 

• Strong attention to detail  

• Strong client service orientation  

• Ability to prioritize, work to tight deadlines, and manage your own caseload. 

Benefits:

• Comprehensive Healthcare Benefits

• 401k Matching

• Workspace benefits for your home office

• Personal & Professional development funds

• Family Planning Support

• Flexible Vacation (please use them!) & Reddit Global Wellness Days

• 4 months of paid Parental Leave

• Paid Volunteer time off