{"id":2145506,"url":"https://alion.io/job/whatnot-security-engineer-grc","title":"Security Engineer (GRC)","company":{"id":5086,"name":"Whatnot","domain":"whatnot.com","url":"https://alion.io/company/whatnot","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":{"grade":"C","score":69,"open_postings":95,"ghost_share":0.516,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":175000,"max":230000,"currency":"USD","period":"year","gross":null,"usd_annual":230000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Cloudflare","optional":false},{"name":"GitHub","optional":false},{"name":"Okta","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-08-19T00:01:33Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-12T11:34:06Z","board_verified":true,"closed_at":null,"days_open":54,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":54},"description":"Join Whatnot, the largest live shopping platform in North America and Europe. As a Security Engineer (GRC), you will be responsible for implementing secure configurations, developing security requirements, preparing for external audits, shaping the strategic direction of the Security GRC team, and leading the security risk management program. You should have a minimum of 5+ years of relevant experience in security governance, risk, and compliance, preferably in a tech startup environment.\nMissions\nReviewing and implementing secure configurations across various tools like Okta, Terraform, AWS, Lumos, Cloudflare, and Github.\nDeveloping security requirements for partner teams and driving progress towards the execution of those requirements.\nPreparing for and running external security audits, and leading the security risk management program.","description_format":"text","description_chars":849,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Marketplaces","Social Commerce"],"lifecycle":[{"event":"open","at":"2026-10-09T04:17:57Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 48 · green card filings: 8","filings_12m":48,"filings_prev_12m":34,"green_card_filings_12m":8,"median_offered_wage_usd":208929,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.431,"p_room":0.45,"age_days":54,"expected_fill_days":28,"reasons":["conf:2","stale_co","velocity","win:tail"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":230000,"is_top_pay":true},"html_url":"https://alion.io/job/whatnot-security-engineer-grc","json_url":"https://alion.io/job/whatnot-security-engineer-grc.json","meta":{"generated_at":"2026-10-12T14:18:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22529,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5086},"rest":"https://alion.io/mcp/rest/get_company?id=5086"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwhatnot-security-engineer-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwhatnot-security-engineer-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwhatnot-security-engineer-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/whatnot-security-engineer-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwhatnot-security-engineer-grc"}]}