SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 165,000 - 270,000 / annual
Drata is building an agentic AI platform for continuous compliance automation and trust verification. The company serves 600+ professionals globally and is scaling rapidly in the compliance and risk management space.
In this Staff Product Engineer role on the Third-Party Risk Management (TPRM) platform, you will own features end-to-end—from understanding customer problems through design, implementation, rollout, documentation, and production monitoring. The TPRM platform helps companies identify, assess, and continuously manage vendor and third-party risks by automating vendor portfolio reviews, collecting compliance evidence (SOC 2 reports, ISO certifications), and using AI agents to evaluate risk against organizational criteria.
Key responsibilities:
- Own features completely: problem definition through design, implementation, rollout, documentation, and post-launch monitoring
- Manage your own releases using feature flags and controlling actual rollout strategy
- Treat UX and documentation as core deliverables, not afterthoughts
- Monitor production health for your product area and resolve issues proactively
- Partner closely with Product to understand problems and propose better approaches
- Address bugs and tech debt as ongoing work, not deferred tasks
- Build and improve AI agent experiences at the core of assessment workflows
- Mentor and raise the bar for engineers around you
What sets successful candidates apart: strong judgment to see end-to-end customer impact, genuine ownership of rollout and production health, comfort with ambiguity on under-defined problems, ability to mentor and multiply team effectiveness, investment in domain depth (vendor risk, TPRM, compliance), and clear communication across technical and non-technical partners.
Drata's culture emphasizes integrity, ownership, raising the bar, and open debate. You'll work on problems without established playbooks at the intersection of AI and security. The company offers equity, comprehensive health/wellness benefits, parental leave, professional development stipends, and flexible time off.
Requirements:
- 8–10+ years of professional software engineering experience building and owning production systems end to end
- Proficiency in JavaScript/TypeScript across the stack (must-have)
- Backend experience with Node.js/NestJS; front-end experience with React
- Experience with event-driven architecture and durable workflow orchestration (e.g., Temporal)
- Solid grounding in relational databases, testing, observability/telemetry, and modern CI/CD practices
- Ability to operate across teams and product areas; owns architecture and long-term technical direction
- Sets technical direction for others and serves as primary escalation point
- Makes decisions spanning multiple areas and longer time horizons
- Mentors across the team and closes gaps between disparate parts of the system
- Plans for the long term and avoids short-term-only solutions
Bonus qualifications:
- Experience in TPRM, vendor risk, GRC, or compliance domains
- Experience building or working alongside AI-powered product features
