Senior Cloud Security Software Engineer - Security Products & Automation

About the position Grainger is seeking a Senior Cloud Security Software Engineer to design and build the next generation of cloud-native security products and automation frameworks. This role is ideal for a developer who codes security, not just configures it. You'll create internal security products, API abstraction layers, and automation platforms that unify and extend the capabilities of tools such as CrowdStrike, Rapid7, Wiz, and others. You will architect, develop, and operate scalable security services that enhance visibility, detection, and response across Grainger's cloud environments. You will report to the Senior Manager of Information Security Engineering. "This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g., OPT or H-1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position." Responsibilities • Design and Build Security Products • Architect and develop internal security products and API abstraction layers for tools like CrowdStrike, Rapid7, Wiz, and others. • Build scalable APIs, SDKs, and microservices that unify data models, authentication, and automation across security platforms. • Develop Secure Cloud Services • Write high-quality code (Python, Go, or TypeScript) for event-driven and serverless architectures using AWS Lambda, SQS, EventBridge, and API Gateway. • Implement Infrastructure-as-Code using Terraform or AWS CDK to deploy and manage security services. • Engineer Integrations and Automations • Integrate with enterprise systems such as Splunk, Google SecOps, Wiz, and Rapid7 using RESTful APIs and webhooks. • Build automation pipelines to orchestrate detection, investigation, and remediation across cloud and hybrid environments. • Embed Observability and Reliability • Instrument services with metrics, logs, and traces; monitor with Datadog, CloudWatch, and Grafana. • Ensure SLAs and SLOs are met through automated health checks and alerting. • Apply Secure Development Practices • Incorporate secure coding standards, code reviews, and automated testing throughout CI/CD pipelines. • Apply threat modeling and least-privilege principles to all developed components. • Collaborate and Enable • Work closely with Cloud, Infrastructure, and Security Operations teams to deliver resilient, automated, and secure platforms. • Document APIs, SDKs, and workflows for reusability and internal developer enablement. Requirements • Bachelor's or Master's degree in Computer Science, Software Engineering, or Cybersecurity, or equivalent experience. • 5+ years of experience as a software engineer or security developer building APIs, services, or automation frameworks. • Proficiency in Python, Go, or TypeScript, and experience developing cloud-native applications on AWS. • Deep experience with AWS Security Hub, GuardDuty, IAM, and serverless services (Lambda, API Gateway, EventBridge). • Proven integration experience with APIs from platforms such as CrowdStrike, Wiz, Rapid7, or Splunk. • Expertise in CI/CD pipelines, Git workflows, and Infrastructure-as-Code (Terraform or AWS CDK). • Knowledge of secure coding, authentication (OAuth2/OIDC), and data protection best practices. Nice-to-haves • Experience developing internal security products or platforms (e.g., Verity-style tools). • Familiarity with AI-assisted engineering for code generation, testing, or enrichment. • Certifications such as AWS Security Specialty, GIAC Cloud Security Automation, or CISSP. Benefits • With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including: • Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing. • 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year. • 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required. • Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools. • Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents. Apply tot his job Apply To this Job