[Hiring] Software Engineer @Vanta

Role Description

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease.

As a Software Engineer, you'll build and own full-stack features and platform primitives across our stack, work closely with the teams and partners who depend on what you ship, and grow into broader technical ownership. Your work will directly accelerate Vanta's growth.

The Integrations Platform team within Vanta Government Cloud mission is to power the world's largest trust automation ecosystem, enabling any person or agent to build, connect, and automate trust seamlessly.

In this role, you'll:

• Design, build, and own full-stack features and platform primitives that internal teams, partners, and customers build on.
• Deploy, operate, support, and maintain integrations running in Vanta's Government Cloud, including monitoring, on-call / incident response, and change management within the GovCloud boundary.
• Contribute to our authentication, data-ingestion, and schema-evolution services, keeping integrations with external systems secure and reliable.
• Partner with federal subject-matter experts to implement and maintain continuous-monitoring detectors and automated tests, with versioned framework mappings.
• Build secure, well-documented, scalable services and UI with TypeScript, React, and Node.js.
• Improve performance, operational excellence, and SDLC practices within the team.
• Use AI tools and workflows to accelerate development and operations.

Qualifications

• 6+ years of full-stack development building reliable, scalable, fault-tolerant systems.
• Platform and API design: you've built APIs and reusable components others depend on, with a solid grounding in RESTful APIs, authentication protocols (OAuth, API keys, JWT), and security best practices.
• Data integrations: you've built data ingestion from external systems (Cloud Providers, HRIS, Identity Providers, Code Repositories) using best practices like rate limiting, retries and idempotency, and webhooks.
• Systems thinking: you design for scale, reliability, and failure modes. You look around corners, address edge cases, and proactively identify and address risk.
• Collaboration: you partner with internal teams, Federal agencies employees, vendors, and Third-Party Assessment Organization (3PAOs) to achieve mutual success.
• Interest in security or compliance: you're motivated by building trustworthy systems in a regulated environment.
• Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.

Requirements

• Physical location: you must reside in, and perform all work exclusively from within, the United States, accessing systems only from U.S. locations.
• Work Authorization Requirements: You must be authorized to work in the United States without the need for employer sponsorship.

Preferred Qualifications

• Familiarity with compliance frameworks (FedRAMP, NIST 800-53, FISMA) and how they apply to cloud and integration environments.
• Experience building or operating in a government or otherwise regulated cloud environment (e.g., AWS GovCloud, Azure Government, or GCP).

Benefits

• Industry-competitive salary and equity.
• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans.
• 16 weeks fully-paid Parental Leave for all new parents.
• Health & wellness stipend.
• Remote workspace, internet, and cellphone stipend.
• Commuter benefits for team members who report to the SF and NYC office.
• Family planning benefits.
• Matching 401(k) contribution with immediate vesting.
• Flexible PTO policy, plus 80 hours of Sick Time.
• 11 company-paid holidays.
• Virtual team building activities, lunch and learns, and other company-wide events!
• Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney.

Company Description

We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security.

Now more than ever, making security continuous—not just a point-in-time check—is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust—all in a way that's real-time and transparent.