Senior Software Engineer, Risk Management

Vanta; United States; Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Industry-competitive salary

Equity participation

Comprehensive health benefits

Remote workspace stipend

Commuter benefits

401(k) matching

Flexible PTO

Sick time

Company holidays

Team events

Job summary

Vanta is seeking a Senior Software Engineer for the Risk (TPRM) team to build full-stack experiences and data infrastructure for managing vendor risk at scale. You will work across vendor lifecycle management and monitoring areas, contributing to data models and platform abstractions.

You will design and ship features, participate in code reviews, and collaborate with product, design, and other engineers to deliver high-quality, impactful solutions in a fast-paced environment.

Qualifications

• Professional software engineering with full-stack or product-focused development.
• Strong proficiency in TypeScript/React (front-end) or a backend language such as Node.js.
• Experience building production-quality web applications in a fast-paced environment.
• Solid understanding of databases and REST or GraphQL API design.

Responsibilities

• Design, build, and maintain full-stack features across the TPRM surface (vendor onboarding, lifecycle management, monitoring).
• Contribute to the vendor data model and core platform abstractions for TPRM products.
• Write clean, well-tested code and participate in code reviews; uphold engineering quality standards.
• Engage in architecture discussions and contribute to technical decisions within your team.
• Collaborate with product, design, and other engineering teams to deliver customer-facing features with real business impact.

Skills

Full-stack

TypeScript/React

Node.js

REST/GraphQL

Job description

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Senior Software Engineer, Risk (TPRM) - Job Description As a Senior Software Engineer on Vanta's TPRM team, you'll build the full-stack product experiences and underlying data infrastructure that help enterprises manage vendor risk at scale, working across teams focused on vendor lifecycle management and vendor monitoring. Vanta's TPRM (Third-Party Risk Management) team is building the products that make vendor risk management seamless for security and procurement teams. From vendor onboarding and lifecycle management to continuous monitoring and procurement integrations, we're creating the platform that helps Vanta customers understand, track, and mitigate third-party risk, a fast-growing, business-critical capability for modern enterprises. As a Senior Software Engineer, you'll contribute as a core member of either the Vendor Lifecycle or Vendor Monitoring Experience team. You'll design and ship full-stack features that directly shape how customers manage vendor relationships, collaborate with product and design partners, and bring real engineering ownership to a product area that’s growing quickly within Vanta.

What you'll do as a Senior Software Engineer at Vanta:

• Design, build, and maintain full-stack features across the TPRM product surface, including vendor onboarding, lifecycle management, and monitoring workflows
• Contribute to the vendor data model and core platform abstractions that power TPRM products
• Write clean, well-tested code and actively participate in code reviews; uphold engineering quality standards
• Engage in architecture discussions and contribute to technical decision-making within your team
• Collaborate with product, design, and other engineering teams to deliver high-quality, customer-facing features with real business impact

How to be successful in this role:

• Professional software engineering experience with full-stack or product-focused development
• Strong proficiency in TypeScript/React (front-end) or a backend language such as Node.js
• Experience building and shipping production-quality web applications in a fast-paced environment
• Solid understanding of databases and REST or GraphQL API design
• Collaborative approach to engineering; ability to partner across product, design, and engineering to deliver results

Nice to have:

• Experience building with AI agents, LLM APIs (OpenAI/Anthropic), or eval frameworks, especially relevant for Vendor Lifecycle team roles
• Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact.

What you can expect as a Vanta'n:

• Industry-competitive salary and equity
• Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans
• 16 weeks paid Parental Leave for all new parents
• Health wellness stipend
• Remote workspace, internet, and cellphone stipend
• Commuter benefits for team members who report to the SF and NYC office
• Family planning benefits
• Matching 401(k) contribution with immediate vesting
• Flexible PTO policy, plus 80 hours of Sick Time
• 11 company-paid holidays
• Virtual team building activities, lunch and learns, and other company-wide events!

[Canada] What you can expect as a Vanta'n:

• Industry-competitive salary and equity
• 100% covered medical, dental, and vision benefits with dependents coverage
• Pension contribution
• 16 weeks paid Parental Leave for all new parents
• Health wellness stipend
• Remote workspace, internet, and cellphone stipend
• Flexible work hours and location
• 21 days of Vacation Time and 80 hours of Sick Leave11 company-paid holidays
• Virtual team building activities, lunch and learns, and other company-wide events!
• Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney

At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply.

About Vanta

We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous, not just a point-in-time check, is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust, all in a way that's real-time and transparent.