Senior Software Engineer, Privacy and Risk

Reddit is a community of communities. It’s built on shared interests, passion, and trust and is home to the most open and authentic conversations on the internet. Every day, Reddit users submit, vote, and comment on the topics they care most about. With 100,000+ active communities and approximately 82M+ daily active unique visitors, Reddit is one of the internet’s largest sources of information. For more information, visit redditinc.com.

Reddit is growing fast, and the Privacy and Risk Security Engineering Team is scaling up with the rest of the org. We are building foundational capabilities, and have ground to cover in all privacy, risk, and compliance functions.

The Reddit Privacy and Risk Security Engineering team is rapidly developing and looking for an Information Security Engineer with a focus on Privacy. This is an exciting opportunity to get in and have an outsized impact on a highly skilled and motivated team. We look for humble experts with a relentlessly resourceful and entrepreneurial, “can do” view of privacy and compliance. We want to deliver facts and not FUD to the business to enable Reddit to manage risk more effectively. Culture is important to us, and a learning and developing mentality is vital regardless of the work assigned. 

As an Information Security Engineer, you will be accountable for developing solutions to close gaps identified related to security, privacy, compliance, assurance, and business policy and to build the next generation of data privacy safeguards to continue to evolve how we handle Redditor’s data and preserve anonymity as a core component of what makes Reddit unique. You will partner closely with cross-functional stakeholders in Legal, Policy, and Trust and Safety teams to ensure a holistic view of privacy, security, risk, and compliance. 

Location: US remote-friendly

Reddit is continuing to grow our teams with the best talent. This role is remote-friendly. If you happen to live close to one of our physical office locations, our doors are open for you to come into the office as often as you'd like. 

Projects you will work on:

• Design, build, and implement effective technical solutions that enable privacy, compliance, and data protection by design and by default
• Translate privacy and compliance rules and policies into robust, scalable, reusable solutions that protect user and advertisers while enabling safe, transparent use of data
• Integrate privacy by design into the software development lifecycle, including system requirements collection, architecture, design, development, and testing
• Partner cross-functionally with Legal, Policy Trust and Safety teams to understand compliance requirements and translate into actionable product requirements
• Automate ad hoc processes and scripts to create efficiency and consistency
• Understand the unique requirements related to advertising products and services from the business and advertiser perspective

Ideal candidates:

• 7+ years of hands-on experience in working with privacy, security, compliance and assurance policy applications in the software development lifecycle
• 3-5 years of hands-on experience building clean, maintainable, and well-tested automated scripts or processes to support privacy, risk, or data governance-type projects.
• Working knowledge of large-scale cloud storage and data architecture related to privacy practices (for example: limiting data use, complying with data retention and deletion, encrypting data, minimum data access principles)
• Comfortable navigating unfamiliar tech stacks and working with new languages and technologies
• Experience with any of the following:  Python, Java, Go or JavaScript / TypeScript. 
• Understanding of practical applications of privacy by design, including data protection and/or cryptography
• Experience with data privacy requirements stemming from regulatory and legislative mandates, including CCPA, GDPR, and state data breach notification laws
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Ability to learn and research new technologies and standards rapidly, assess them for privacy exposures, and drive changes to enhance privacy
• Strong interpersonal, consultative, consensus-builder, and issue-resolution skills
• Proven verbal and written communication skills
• Capable of conducting data privacy compliance reviews and audits.  
• Ability to review, analyze, and organize documentary and factual evidence   
• Ability to analyze and assess data privacy control capabilities and provide remediation recommendations

 Personal Skills