Senior Full-Stack Security/GRC Platform Engineer

Senior Full-Stack Security/GRC Platform Engineer @ Guidehouse | Jobright.ai

Senior Full-Stack Security/GRC Platform Engineer jobs in United States

Overview

Company

This job has closed.

APPLY to similar jobs

Guidehouse · 1 month ago

Senior Full-Stack Security/GRC Platform Engineer

United States

Full-time

Remote

Senior Level

$86K/yr - $130K/yr

6+ years exp

Guidehouse is a company specializing in Cyber Engineering and is seeking a Senior Full-Stack Security/GRC Platform Engineer. The role involves maintaining and extending a large full-stack Governance, Risk, and Compliance platform, requiring expertise across backend and frontend development, database management, and security engineering.

Professional ServicesConsultingGovernmentAdviceManagement Consulting

H1B Sponsor Likely

Responsibilities

Maintain and extend a FastAPI backend with hundreds of registered API routes

Build and refine React/TypeScript product workflows across a large frontend surface

Design and maintain SQLAlchemy models, Alembic migrations, PostgreSQL queries, and data integrity rules

Support scanner integrations, finding normalization, deduplication, evidence workflows, and compliance mapping

Maintain AI-assisted features through a centralized provider abstraction rather than direct calls to providers

Work across GRC workflows including findings, evidence, SSPs, POA&Ms, RMF, FedRAMP/FISMA, SCRM, ZTA, ISCM, risk acceptance, and reporting

Keep local development and test environments healthy using Docker Compose, Redis, PostgreSQL, worker queues, Ollama, observability services, and frontend tooling

Maintain quality gates including linting, type checking, OpenAPI drift checks, migration safety, SDK drift, architecture boundaries, and test suites

Debug issues across frontend state, API contracts, database state, workers, scanner output, generated SDKs, and deployment configuration

Treat documentation as helpful but secondary to the codebase; validate assumptions against source, tests, migrations, and running behavior

Qualification

Python backend developmentFastAPIPydanticSQLAlchemyAlembicAsync PythonPytestReactTypeScriptViteReact RouterReact QueryPostgreSQLRedis-backed queuesSecurity engineering fundamentalsAuthenticationAuthorizationRBACAudit logsSecret handlingDependency riskInput validationVulnerability findings and remediation workflowsEvidence collectionSSPsPOA&MsControl mappingsAudit packagesRisk acceptanceNIST 800-53

Required

Minimum of SIX (6) years' experience with Python backend development

Strong FastAPI, Pydantic, SQLAlchemy, Alembic, async Python, and pytest experience

Strong React, TypeScript, Vite, React Router, React Query, and component architecture experience

PostgreSQL experience, including schema design, migrations, indexes, JSON/JSONB, and relational integrity

Experience maintaining large API surfaces and generated frontend API clients

Experience with background jobs or async workers using Redis-backed queues

Strong security engineering fundamentals

authentication, authorization, RBAC, audit logs, secret handling, dependency risk, and input validation

Ability to diagnose source-of-truth issues when documentation, generated code, database schema, and runtime behavior disagree

Vulnerability findings and remediation workflows

Evidence collection and evidence sufficiency

SSPs, POA&Ms, control mappings, audit packages, and risk acceptance

NIST 800-53, RMF, FedRAMP/FISMA, CMMC, SCRM, ZTA, ISCM, and related compliance concepts

Scanner output from tools such as cloud security scanners, vulnerability scanners, SAST/IaC tools, secret scanners, identity/M365 scanners, and web security scanners

Provenance, auditability, and defensibility requirements for regulated workflows

Experience building AI-assisted product features, preferably in security, compliance, document review, or workflow automation

Understanding of RAG, embeddings, document extraction, prompt/context design, and evidence citation

Ability to enforce scoped context, provenance, guardrails, and human-review boundaries

Comfort maintaining provider abstractions across local and cloud AI providers

Docker Compose for local development

AWS-style production operations

containers, managed databases, caches, object storage, CDN, IAM, logs, and deployment pipelines

Terraform or similar infrastructure-as-code experience

CI/CD debugging and release discipline

Observability, logs, health checks, and operational runbooks

Preferred

Prior experience with GRC, audit automation, security consulting tools, vulnerability management, FedRAMP/FISMA, or SSP/POA&M workflows

Experience with generated OpenAPI SDKs

Experience producing PDF, Excel, DOCX, PowerPoint, or audit package exports

Experience with immutable audit logs, provenance chains, multi-tenant permissions, or evidence workflows

Benefits

Medical, Rx, Dental & Vision Insurance

Personal and Family Sick Time & Company Paid Holidays

Parental Leave

401(k) Retirement Plan

Group Term Life and Travel Assistance

Voluntary Life and AD&D Insurance

Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts

Transit and Parking Commuter Benefits

Short-Term & Long-Term Disability

Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities

Employee Referral Program

Corporate Sponsored Events & Community Outreach

Care.com annual membership

Employee Assistance Program

Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)

Position may be eligible for a discretionary variable incentive bonus

Company

Guidehouse

Glassdoor

3.1

AI-led advisory, technology, and managed services for enterprises.

Founded in 2018

Washington, District of Columbia, USA

10001+ employees

https://guidehouse.com

H1B Sponsorship

Guidehouse has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

12%

Represents job field similar to this job

Engineering and Development

Management and Executive

Customer Service and Support

Accounting and Finance

Product Management

Trends of Total Sponsorships

*2026 (7)

2025 (25)

2024 (20)

2023 (29)

2022 (49)

2021 (50)

2020 (59)

Funding

Current Stage

Late Stage

Total Funding

$0.75M

Key Investors

Mission Daybreak

2023-11-06Acquired

2023-02-16Grant

• $0.75M

Leadership Team

Scott McIntyre

Chairman and CEO

Dan Hushon

Chief Technology Officer, Partner

Recent News

Washington TechnologySupply chain, operations and health leadership moves across the market

2026-08-22

Pulse 2.0Guidehouse Appoints Kelly Hernandez As CFO And Stuart Brown As Chief Transformation Officer

2026-07-29

Bizjournals.com Feed (2025-11-12 15:43:17)Guidehouse taps Clark Construction exec as new CFO

2026-07-25

Company data provided by crunchbase