Staff Software Engineer, Evidence & Frameworks
Drata · Hybrid - San Francisco
About this role
## Staff Software Engineer, Evidence & Frameworks Drata is building the trust layer between great companies—automating compliance, managing risk, and helping organizations prove trust continuously as they scale. ### Why join Drata - **Problems without a playbook:** Work at the edge of AI and security on agentic governance, continuous compliance, and real-time trust verification. - **Real ownership:** Own outcomes and raise the bar—not just check boxes. - **A seat at the table:** Open debate and diverse viewpoints are built into how decisions are made. - **Growth at rocketship speed:** As Drata scales, scope grows fast—high performers get more ownership and visibility. - **A crew, not just coworkers:** A “come as you are” culture with sharp, curious people. ### Job Summary **Evidence & Frameworks** is the engine behind Drata’s promise of continuous compliance. These teams build systems that: - collect evidence from **hundreds of integrations**, - map it to controls across **dozens of frameworks** (SOC 2, ISO 27001, HIPAA, NIST, EU Cyber Resilience Act, AI standards, and more), and - keep **thousands of customers audit-ready every day**. As a **Staff Software Engineer**, you’ll be the technical leader across these teams—setting architectural direction for evidence collection and the framework/controls model, tackling the hardest cross-team problems (scale, reliability, data correctness), and helping bring AI agents into these workflows safely. ### What you’ll do - Own technical direction for evidence collection and the framework/controls data model with Product and Engineering leadership. - Design and build scalable, reliable systems to ingest and process evidence across many integrations and tenants. - Lead cross-team initiatives (e.g., re-architecting pipelines, adding new frameworks faster, migrating shared functionality). - Bring AI/agentic capabilities into evidence and framework workflows with guardrails for accuracy, auditability, and customer trust. - Monitor system health (SLOs, errors, latency, deploy/change-failure signals), drive root-cause analysis, and turn recurring issues into roadmap work. - Review architecture and code for quality, scalability, and security—while enabling teams to own implementation. - Troubleshoot escalated performance and data-integrity issues through to resolution. - Mentor engineers via design reviews, pairing/coaching, and clear communication of technical decisions. ### What you’ll bring - **10+ years** building and operating production software systems (including customer-facing products supported in production). - Proven technical leadership across multiple teams: setting direction, aligning stakeholders, delivering complex cross-team work. - Deep experience with **distributed systems**, **data pipelines**, or **integration-heavy platforms** at meaningful scale. - Strong backend fundamentals: API design, relational databases/data modeling, testing, observability, CI/CD. - Production experience with **TypeScript/Node.js** (stack includes TypeScript, NestJS, and React). Strong engineers from other languages who can ramp quickly on TypeScript are encouraged. - Experience with at least one major cloud platform (**AWS preferred**) and infrastructure as code. - Practical use of AI-assisted development tools and good judgment about where AI belongs. - Clear written and verbal communication. ### Nice to have - Experience in security, compliance, GRC, or audit products. - Experience building LLM-pow
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.