Software Engineer

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Our Software Engineers build and own high-value products for our customers and the infrastructure that lets our business scale. Vanta's team and technology surface are growing quickly, and it's essential that we invest in the right abstractions and systems to scale with our business. As a Software Engineer, you'll build and own full-stack features and platform primitives across our stack, work closely with the teams and partners who depend on what you ship, and grow into broader technical ownership. Your work will directly accelerate Vanta's growth. Our business has found incredible product-market fit and has monetized effectively since the day we signed our first customer. We're growing at a blistering pace, which presents career-defining opportunities for engineers to accelerate their growth and to contribute to a rapidly-scaling company. Visit our Vanta Engineering Blog to learn more about what our team is working on! The Integrations Platform team within Vanta Government Cloud mission is to power the world's largest trust automation ecosystem, enabling any person or agent to build, connect, and automate trust seamlessly. Federal compliance is going through its biggest shift in a decade and this team builds the integration platform underneath Vanta Government Cloud that turns federal frameworks into automated, continuously monitored product experiences. This is a builder role: you'll turn federal control requirements into the platform primitives and integrations that make continuous authorization real. We own Vanta's integration ecosystem within the US Government Cloud, which currently includes a growing set of integrations across Cloud Providers (AWS, Azure, GCP), Identity Providers, Mobile Device Management (MDM), and Human Resources Information Systems (HRIS). In this role, you'll build, own, support, and scale Vanta's Government Cloud integration operations. You'll build upon and extend the Integrations Platform, which includes shared primitives for authentication, lifecycle, observability, and publishing so that all integrations are built on the same foundation. Our North Star is to eliminate the barrier to building integrations entirely, enabling anyone to create an integration in minutes using declarative, low-code, and no-code patterns, supercharged by AI agents. What you’ll do as a Software Engineer at Vanta: Design, build, and own full-stack features and platform primitives that internal teams, partners, and customers build on. Deploy, operate, support, and maintain integrations running in Vanta's Government Cloud, including monitoring, on-call / incident response, and change management within the GovCloud boundary. Contribute to our authentication, data-ingestion, and schema-evolution services, keeping integrations with external systems secure and reliable. Partner with federal subject-matter experts to implement and maintain continuous-monitoring detectors and automated tests, with versioned framework mappings. Build secure, well-documented, scalable services and UI with TypeScript, React, and Node.js. Improve performance, operational excellence, and SDLC practices within the team. Use AI tools and workflows to accelerate development and operations. How to be successful in this role: 6+ years of full-stack development building reliable, scalable, fault-tolerant systems. Platform and API design: you've built APIs and reusable components others depend on, with a solid grounding in RESTful APIs, authentication protocols (OAuth, API keys, JWT), and security best practices. Data integrations: you've built data ingestion from external systems (Cloud Providers, HRIS, Identity Providers, Code Repositories) using best practices like rate limiting, retries and idempotency, and webhooks. Systems thinking: you design for scale, reliability, and failure modes. You look around corners, address edge cases, and proactively identify and address risk. Collaboration: you partner with internal teams, Federal agencies employees, vendors, and Third-Party Assessment Organization (3PAOs) to achieve mutual success. You incorporate their feedback into your designs, and are on a clear trajectory to broader technical ownership. Interest in security or compliance: you're motivated by building trustworthy systems in a regulated environment. Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact. Requirements Physical location: you must reside in, and perform all work exclusively from within, the United States, accessing systems only from U.S. locations. Work Authorization Requirements: You must be authorized to work in the United States without the need for employer sponsorship Preferred qualifications Familiarity with compliance frameworks (FedRAMP, NIST 800-53, FISMA) and how they apply to cloud and integration environments. Experience building or operating in a government or otherwise regulated cloud environment (e.g., AWS GovCloud, Azure Government, or GCP) — deep familiarity with one translates well to the others. Bonus: startup or bias-for-action environments, and interest in security or compliance products What you can expect as a Vanta’n: Industry-competitive salary and equity Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans 16 weeks fully-paid Parental Leave for all new parents Health & wellness stipend Remote workspace, internet, and cellphone stipend Commuter benefits for team members who report to the SF and NYC office Family planning benefits Matching 401(k) contribution with immediate vesting Flexible PTO policy, plus 80 hours of Sick Time 11 company-paid holidays Virtual team building activities, lunch and learns, and other company-wide events! Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors and may vary based on candidate location, skills, depth of work experience, and relevant licenses/credentials. #LI-remote At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply. About Vanta We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation.Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous—not just a point-in-time check— is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust— all in a way that's real-time and transparent. Referral Instructions If you are being referred for the role, please contact that person to apply on your behalf.