Staff Software Engineer, Foundations

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. 

As a Staff Software Engineer on the Automation - Foundations team, you will lead the re-platforming of the data layer underneath Vanta’s entire compliance product. This is a migration that spans multiple teams, has to preserve every public API contract along the way, and cannot lose a single customer’s evidence while it happens.

Foundations is Vanta’s data platform team. We ingest security and compliance data from across our customer’s environments, currently tens of thousands of resources per second, with single-customer bursts running into the millions. We store the data, catalog it, make it queryable, and turn it into evidence that has to survive a real SOC 2 or FedRAMP audit.

We are in the middle of moving our platform from a Mongo-centric architecture to a schema-aware, Postgres-backed architecture, on a Kafka and S3 pipeline that decouples data fetching from processing. Both pipelines run in parallel today, the hard problems here are correctness under migration, eventual consistency, and multi-tenancy, in a domain where “mostly right” is not an acceptable failure mode.

Visit our Vanta Engineering Blog https://www.vanta.com/all-categories/engineering to learn more about what our team is working on.

What you'll do as a Staff Software Engineer at Vanta:

- Lead the migration of Vanta’s resource data model from a Mongo-centric solution to a schema-aware Postgres-backed solution and running both generations in parallel without breaking a customer integration.

- Drive solutions across teams that you do not own but are dependent on the platform built by your team.

- Design for correctness under eventual consistency with idempotent session handling, conditional writes that survive out-of-order delivery, reconciliation rather than strict cross-service validation, and explicitly backpressure instead of implicit database limits.

- Design and evolve Vanta's data ingestion and pipeline architecture, ensuring reliable, high-throughput processing of terabyte-scale data streams across distributed systems

- Take our Query API from internal use to a production platform with schema versioning, joins and exports, per-tenant isolation, and predictable latency under load.

- Build data infrastructure where correctness is externally auditable as the evidence Vanta produces has to hold up in front of an auditor.

- Diagnose the failures that only appear at production data shapes and can include hot partitions, unbounded fan-out, and online rewrites of continuously-written tables.

- Set architectural direction for streaming infrastructure (Kafka and event queuing), caching layers (Redis), and persistent storage (Postgres, MongoDB) across the Foundations stack

- Mentor senior engineers across the team, raising the technical bar through design reviews, architectural guidance, and hands-on contributions to the most complex systems challenges

- Champion engineering excellence in reliability, observability, and operational hygiene across the data infrastructure that powers Vanta's core product

- Leverage AI tools and systems to accelerate your own work and explore how they can improve the systems you build

How to be successful in this role:

- Proven track record leading platform migration initiatives (v1→v2 architecture transitions) while maintaining backward compatibility and system availability

- Strong command of streaming and queuing infrastructure (Kafka or equivalent), including partitioning strategy, consumer group semantics, redelivery, and idempotency.

- Deep industry experience in distributed systems and data pipeline engineering, with demonstrated experience designing and operating systems at enterprise scale (terabyte-scale ingestion, high-throughput event processing)

- Fluency in both relational and document data modeling at scale (Postgres and MongoDB), including query planning, connection pooling, and online schema change on large, continuously written tables.

- Experience collaborating with engineering leadership to define multi-quarter technical roadmaps and drive them through to delivery

- Solid AWS fundamentals and comfort operating in TypeScript and Node.

- Able to articulate complex systems tradeoffs to both technical and non-technical audiences and bring cross-functional partners along on long-horizon technical decisions

- Open to using AI to amplify your skills and strengthen your work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.

What you can expect as a Vanta’n:

- Industry-competitive salary and equity

- Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans

- 16 weeks of paid Parental Leave for all new parents

- Health & wellness stipend

- Remote workspace, internet, and cellphone stipend

- Commuter benefits for team members who report to the SF and NYC offices

- Family planning benefits

- Matching 401(k) contribution with immediate vesting

- Flexible PTO policy, plus 80 hours of Sick Time

- 11 company-paid holidays

- Virtual team-building activities, lunch-and-learns, and other company-wide events!

- Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney

#LI-remote

At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply.

About Vanta

We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. 

Now more than ever, making security continuous—not just a point-in-time check— is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust— all in a way that's real-time and transparent.

Referral Instructions

If you are being referred for the role, please contact that person to apply on your behalf.