Software Engineer, Evidence & Frameworks

At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for:

• Problems without a playbook:
  You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go.
• Real ownership, not just process:
  Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them.
• A seat at the table:
  Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level.
• Growth at rocketship speed:
  Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience.
• A crew, not just coworkers:
  Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here  and follow us on Linked In  for company news, employee stories, and career updates.

Evidence & Frameworks is the engine behind Drata's promise of continuous compliance. Our teams build the systems that collect evidence from hundreds of integrations, map it to controls across dozens of frameworks (SOC 2, ISO 27001, HIPAA, NIST, the EU Cyber Resilience Act, AI standards and more), and keep thousands of customers audit-ready every day.

As a Staff Software Engineer, you'll be the technical leader across these teams. You'll set architectural direction for evidence collection and the framework and controls model, take on the hardest cross-team problems around scale, reliability and data correctness, and help us bring AI agents into these workflows safely. You'll stay hands-on while raising the bar for the engineers around you.

• Own the technical direction for evidence collection and the framework/controls data model, partnering with Product and Engineering leadership to shape the roadmap
• Design and build scalable, reliable systems that ingest and process evidence across many integrations and tenants
• Lead cross-team projects that are too big for one team, such as re-architecting a pipeline, introducing new frameworks for adding compliance standards faster, or migrating shared functionality
• Bring AI and agentic capabilities into evidence and framework workflows with the right guardrails for accuracy, auditability and customer trust
• Read your teams' system health (SLOs, errors, latency, deploy and change-failure signals), chase root causes, and turn recurring issues into roadmap work
• Review architecture and code to ensure quality, scalability and security, while empowering teams to own implementation and delivery
• Troubleshoot escalated performance and data-integrity issues through to resolution
• Mentor engineers through design reviews, pairing and informal coaching, and communicate technical decisions clearly to engineers, product partners and leadership

• 10+ years of software engineering experience building and operating production systems, including customer-facing products you supported in production
• A track record of technical leadership across multiple teams: setting direction, driving alignment, and delivering complex cross-team initiatives
• Deep experience with distributed systems, data pipelines or integration-heavy platforms at meaningful scale
• Strong backend fundamentals: API design, relational databases and data modeling, testing, observability, and CI/CD
• Production experience with Type Script/Node.js (our stack is Type Script, NestJS and React). Strong engineers from other languages who can ramp quickly on Type Script are encouraged to apply
• Experience with at least one major cloud platform (AWS preferred) and infrastructure as code
• Practical, everyday use of AI-assisted development tools, and good judgment about where AI belongs in a product
• Clear written and verbal communication

• Experience in security, compliance, GRC or audit products
• Experience building LLM-powered features or agentic workflows in production
• Familiarity with NestJS, TypeORM, Jest, Redis and Elasticsearch
• Experience in a startup or growth-stage environment

• First 90 days: you understand the evidence and frameworks architecture and its pain…