Software Engineer, Core GRC

Location

Hybrid - San Francisco

Full time

Hybrid

Engineering

Our Mission & Values: At Drata, we help companies earn and keep the trust of their users, customers, partners, and prospects. We’re the proof layer that shows great companies deserve the trust they aim to build.

We live our values every day. Built on Trust means consistency is everything. Act with Integrity by always doing the right thing. Being Customer-Obsessed keeps the people we serve at the center of our work. Competitive Fire drives us to push ourselves harder than anyone else. Diversity brings unique perspectives that lead to better solutions. Automation First ensures we save time and money by making efficiency a priority.

At Drata, we’re not just building software - we’re building a mindset. Everything we do springs from:

• Be a Driver (Owner-Operator Mentality): Own your work. Improve relentlessly. Deliver results.
• Move at Drata Speed (Precision & Velocity): Fast decisions. Quick learning. Immediate impact.
• Stay Mission-Driven (Customer-Obsessed): Challenge assumptions. Deliver value. Stay hungry.

We pair that high‑velocity culture with a thoughtful hybrid model because we believe flexibility and collaboration both matter. That’s why in the Bay we come together in‑office Tuesday through Thursday our high‑impact collaboration days where teams align, strategize, and innovate. Mondays and Fridays are flexible, giving you space for focused work, balance, and autonomy.

If you thrive when you’re empowered, energized, and working with smart, mission‑driven people, you’ll feel at home here.

The best way to understand the Driver’s Mindset is to see it in action. We’re an award‑winning, mission‑driven team of 600+ people worldwide
, united by a culture that values trust, speed, and continuous growth.

• See the Speed:
  Watch our CEO, Adam Markowitz, discuss the hyper‑growth journey, from $0 to $100M ARR in just four years
• Hear the Voice of the Team:
  Explore our "Life at Drata" page for employee testimonials on our collaborative and the growth opportunities available.
• Experience the Impact:
  See why we are consistently recognized on Fortune's Best Workplaces lists.
• Connect with Us on Socials:
  Linked In - follow us for company updates, employee stories, and career news.

Job Summary:

The Staff Software Engineer serves as a technical leader across multiple small teams. They design and build scalable systems, guide architectural decisions, and tackle complex challenges that span codebases and domains. They work closely with Product and Engineering leadership to shape the technical roadmap, ensure systems are reliable and secure, and drive key cross‑team initiatives from idea to implementation. The role balances deep technical work, collaborative problem‑solving, and mentoring in a distributed environment.

• Partner with Product to shape roadmap requirements and recommend the right technologies and design patterns.
• Review architecture and code for your team’s projects to ensure quality, scalability, and security—while empowering the team to own implementation and delivery.
• Troubleshoot performance and scalability issues escalated from your teams. Identify root causes, guide solutions, and see them through to resolution.
• Own and deliver cross‑team projects that are difficult to tackle at the team level—such as introducing new frameworks, improving the developer experience, or migrating shared functionality.
• Mentor engineers across teams through guilds, office hours, and informal coaching.

• 10+ years of experience as a software engineer, with a strong foundation in building and maintaining production systems.
• 3+ years of experience working with Node.js or React in production environments.
• 1+ years of experience with NestJS (preferred).
• Bachelor’s degree in Computer Science or a related technical field, or equivalent experience.
• Strong experience with authentication & authorization protocols like OAuth, SCIM, OIDC, and RBAC systems.
• In depth knowledge of authentication and authorization systems from large third party providers.

• JavaScript/T…