Senior Cloud Security Software Engineer - Security Products & Automation

Work Location Type: Hybrid
Req Number 324892
About Grainger:
W.W. Grainger, Inc., is a leading broad line distributor with operations primarily in North America, Japan and the United Kingdom. At Grainger, We Keep the World Working® by serving more than 4.5 million customers worldwide with products and solutions delivered through innovative technology and deep customer relationships. Known for its commitment to service and award-winning culture, the Company had 2024 revenue of $17.2 billion across its two business models. In the High-Touch Solutions segment, Grainger offers approximately 2 million maintenance, repair and operating (MRO) products and services, including technical support and inventory management. In the Endless Assortment segment, Zoro.com offers customers access to more than 14 million products, and MonotaRO.com offers more than 24 million products. For more information, visit www.grainger.com.
Compensation:
The anticipated base pay compensation range for this position is $110,500.00 to $184,100.00.
Rewards and Benefits:
With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including:

• Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing.
• 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year.
• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required.
• Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools.
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents.

For additional information and details regarding Grainger's benefits, please click on the link below:
https://experience100.ehr.com/grainger/Home/Tools-Resources/Key-Resources/New-Hire
The pay range provided above is not a guarantee of compensation. The range reflects the potential base pay for this role at the time of this posting based on the job grade for this position. Individual base pay compensation will depend, in part, on factors such as geographic work location and relevant experience and skills.
The anticipated compensation range described above is subject to change and the compensation ultimately paid may be higher or lower than the range described above.
Grainger reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion at any time, consistent with applicable law.
Position Details:
Grainger is seeking a Senior Cloud Security Software Engineer to design and build the next generation of cloud-native security products and automation frameworks.
This role is ideal for a developer who codes security, not just configures it. You'll create internal security products, API abstraction layers, and automation platforms that unify and extend the capabilities of tools such as CrowdStrike, Rapid7, Wiz, and others.
You will architect, develop, and operate scalable security services that enhance visibility, detection, and response across Grainger's cloud environments.
You will report to the Senior Manager of Information Security Engineering.
"This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g., OPT or H-1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position."
You will:
Design and Build Security Products

• Architect and develop internal security products and API abstraction layers for tools like CrowdStrike, Rapid7, Wiz, and others.
• Build scalable APIs, SDKs, and microservices that unify data models, authentication, and automation across security platforms.

Develop Secure Cloud Services

• Write high-quality code (Python, Go, or TypeScript) for event-driven and serverless architectures using AWS Lambda, SQS, EventBridge, and API Gateway.
• Implement Infrastructure-as-Code using Terraform or AWS CDK to deploy and manage security services.

Engineer Integrations and Automations

• Integrate with enterprise systems such as Splunk, Google SecOps, Wiz, and Rapid7 using RESTful APIs and webhooks.
• Build automation pipelines to orchestrate detection, investigation, and remediation across cloud and hybrid environments.

Embed Observability and Reliability

• Instrument services with metrics, logs, and traces; monitor with Datadog, CloudWatch, and Grafana.
• Ensure SLAs and SLOs are met through automated health checks and alerting.

Apply Secure Development Practices

• Incorporate secure coding standards, code reviews, and automated testing throughout CI/CD pipelines.
• Apply threat modeling and least-privilege principles to all developed components.

Collaborate and Enable

• Work closely with Cloud, Infrastructure, and Security Operations teams to deliver resilient, automated, and secure platforms.
• Document APIs, SDKs, and workflows for reusability and internal developer enablement.

You have:

• Bachelor's or Master's degree in Computer Science, Software Engineering, or Cybersecurity, or equivalent experience.
• 5+ years of experience as a software engineer or security developer building APIs, services, or automation frameworks.
• Proficiency in Python, Go, or TypeScript, and experience developing cloud-native applications on AWS.
• Deep experience with AWS Security Hub, GuardDuty, IAM, and serverless services (Lambda, API Gateway, EventBridge).
• Proven integration experience with APIs from platforms such as CrowdStrike, Wiz, Rapid7, or Splunk.
• Expertise in CI/CD pipelines, Git workflows, and Infrastructure-as-Code (Terraform or AWS CDK).
• Knowledge of secure coding, authentication (OAuth2/OIDC), and data protection best practices.

Preferred:

• Experience developing internal security products or platforms (e.g., Verity-style tools).
• Familiarity with AI-assisted engineering for code generation, testing, or enrichment.
• Certifications such as AWS Security Specialty, GIAC Cloud Security Automation, or CISSP.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, protected veteran status or any other protected characteristic under federal, state, or local law. We are proud to be an equal opportunity workplace.
We are committed to fostering an inclusive, accessible work environment that includes both providing reasonable accommodations to individuals with disabilities during the application and hiring process as well as throughout the course of one's employment, should you need a reasonable accommodation during the application and selection process, including, but not limited to use of our website, any part of the application, interview or hiring process, please advise us so that we can provide appropriate assistance.