Note: The job is a remote job and is open to candidates in USA. Vanta helps businesses earn and prove trust through continuous security monitoring and verification. The Software Engineer will build, operate, and scale the Integrations Platform for Vanta Government Cloud, developing full-stack features, secure data integrations, monitoring detectors, and platform primitives for regulated federal environments.
Responsibilities
- Design, build, and own full-stack features and platform primitives that internal teams, partners, and customers build on
- Deploy, operate, support, and maintain integrations running in Vanta's Government Cloud, including monitoring, on-call / incident response, and change management within the GovCloud boundary
- Contribute to our authentication, data-ingestion, and schema-evolution services, keeping integrations with external systems secure and reliable
- Partner with federal subject-matter experts to implement and maintain continuous-monitoring detectors and automated tests, with versioned framework mappings
- Build secure, well-documented, scalable services and UI with TypeScript, React, and Node.js
- Improve performance, operational excellence, and SDLC practices within the team
- Use AI tools and workflows to accelerate development and operations
Skills
- 6+ years of full-stack development building reliable, scalable, fault-tolerant systems
- Platform and API design: you've built APIs and reusable components others depend on, with a solid grounding in RESTful APIs, authentication protocols (OAuth, API keys, JWT), and security best practices
- Data integrations: you've built data ingestion from external systems (Cloud Providers, HRIS, Identity Providers, Code Repositories) using best practices like rate limiting, retries and idempotency, and webhooks
- Systems thinking: you design for scale, reliability, and failure modes. You look around corners, address edge cases, and proactively identify and address risk
- Collaboration: you partner with internal teams, Federal agencies employees, vendors, and Third-Party Assessment Organization (3PAOs) to achieve mutual success. You incorporate their feedback into your designs, and are on a clear trajectory to broader technical ownership
- Interest in security or compliance: you're motivated by building trustworthy systems in a regulated environment
- Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact
- Physical location: you must reside in, and perform all work exclusively from within, the United States, accessing systems only from U.S. locations
- Work Authorization Requirements: You must be authorized to work in the United States without the need for employer sponsorship
- Familiarity with compliance frameworks (FedRAMP, NIST 800-53, FISMA) and how they apply to cloud and integration environments
- Experience building or operating in a government or otherwise regulated cloud environment (e.g., AWS GovCloud, Azure Government, or GCP) — deep familiarity with one translates well to the others
- Bonus: startup or bias-for-action environments, and interest in security or compliance products
Benefits
- Equity
- Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
- 16 weeks fully-paid Parental Leave for all new parents
- Health & wellness stipend
- Remote workspace, internet, and cellphone stipend
- Commuter benefits for team members who report to the SF and NYC office
- Family planning benefits
- Matching 401(k) contribution with immediate vesting
- Flexible PTO policy, plus 80 hours of Sick Time
- 11 company-paid holidays
- Virtual team building activities, lunch and learns, and other company-wide events
Company Overview