Senior Software Engineer, Trust and Third Party Risk Management
Vanta · Location not specified · Remote
Vanta
Vanta is a leading player in the trust and security compliance automation market, best known for helping companies continuously monitor security controls and streamline audits for frameworks like SOC 2, ISO 27001, and HIPAA. Founded in 2018, Vanta emerged alongside a wave of security-focused startups aiming to replace manual, spreadsheet-driven compliance work with automated, always-on evidence collection, competing with vendors like Drata, Secureframe, and Tugboat Logic in the fast-growing GRC space. The company has scaled quickly, expanding beyond its original compliance automation roots into broader trust management, serving startups through larger enterprises that need to prove security posture to customers and regulators alike.
Gig description
At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. SENIOR SOFTWARE ENGINEER, TRUST (TPRM) - JOB DESCRIPTION As a Senior Software Engineer on Vanta's Trust TPRM team, you'll build the full-stack product experiences and underlying data infrastructure that help enterprises manage vendor risk at scale — working across teams focused on vendor lifecycle management and vendor monitoring. Vanta's Trust TPRM (Third-Party Risk Management) team is building the products that make vendor risk management seamless for security and procurement teams. From vendor onboarding and lifecycle management to continuous monitoring and procurement integrations, we're creating the platform that helps Vanta customers understand, track, and mitigate third-party risk — a fast-growing, business-critical capability for modern enterprises. As a Senior Software Engineer, you'll contribute as a core member of either the Vendor Lifecycle or Vendor Monitoring Experience team. You'll design and ship full-stack features that directly shape how customers manage vendor relationships, collaborate with product and design partners, and bring real engineering ownership to a product area that's growing quickly within Vanta. What you’ll do as a Senior Software Engineer at Vanta: - Design, build, and maintain full-stack features across the TPRM product surface, including vendor onboarding, lifecycle management, and monitoring workflows - Contribute to the vendor data model and core platform abstractions that power TPRM products - Write clean, well-tested code and actively participate in code reviews; uphold engineering quality standards - Engage in architecture discussions and contribute to technical decision-making within your team - Collaborate with product, design, and other engineering teams to deliver high-quality, customer-facing features with real business impact How to be successful in this role: - Professional software engineering experience with full-stack or product-focused development - Strong proficiency in TypeScript/React (front-end) or a backend language such as Node. js - Experience building and shipping production-quality web applications in a fast-paced environment - Solid understanding of databases and REST or GraphQL API design - Collaborative approach to engineering; ability to partner across product, design, and engineering to deliver results - Nice to have: experience building with AI agents, LLM APIs (OpenAI/Anthropic), or eval frameworks — especially relevant for Vendor Lifecycle team roles - Open to using AI to amplify their skills and strengthen their work - demonstrating curiosity, a willingness to learn, and sound judgment in applying AI responsibly to improve efficiency and impact. [US] What you can expect as a Vanta’n: - Industry-competitive salary and equity - Comprehensive medical, dental, and vision coverage, with 100% of employee-only benefit premiums covered for most medical plans - 16 weeks paid Parental Leave for all new parents - Health & wellness stipend - Remote workspace, internet, and cellphone stipend - Commuter benefits for team members who report to the SF and NYC office - Family planning benefits - Matching 401(k) contribution with immediate vesting - Flexible PTO policy, plus 80 hours of Sick Time - 11 company-paid holidays - Virtual team building activities, lunch and learns, and other company-wide events! - Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney [Canada] What you can expect as a Vanta’n: - Industry-competitive salary and equity - 100% covered medical, dental, and vision benefits with dependents coverage - Pension contribution - 16 weeks paid Parental Leave for all new parents - Health & wellness stipend - Remote workspace, internet, and cellphone stipend - Flexible work hours and location - 21 days of Vacation Time and 80 hours of Sick Leave - 11 company-paid holidays - Virtual team building activities, lunch and learns, and other company-wide events! - Offices in SF, NYC, London, Dublin, Tel Aviv, and Sydney At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply. About Vanta We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. Now more than ever, making security continuous—not just a point-in-time check— is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust— all in a way that's real-time and transparent. Referral Instructions If you are being referred for the role, please contact that person to apply on your behalf.
Requirements to meet
Disclaimer
Suggestions only — review each course yourself to judge whether it meets the role's requirements. Completing a course doesn't guarantee proficiency or that you'll qualify; hiring standards vary by employer.
Skills required
Model Evaluation (required)
GapCourses that may help you meet this requirement:
Generative AI: Prompt Engineering Basics
Coursera · beginner · $49/mo · 9h · ★ 4.7
This course covers Model Evaluation, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 9 hours.
Basic Image Classification with TensorFlow
Coursera · beginner · Price on site · 2h · ★ 4.6
This course directly covers Model Evaluation, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 2 hours.
Introduction to TensorFlow for Artificial Intelligence, Machine Learning, and Deep Learning
Coursera · intermediate · $49/mo · 22h · ★ 4.8
This course covers Model Evaluation, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at an intermediate level and can be completed in approximately 22 hours.
Agentic Workflows (required)
GapCourses that may help you meet this requirement:
Understand features of Copilot Studio agents
Microsoft Learn · beginner · Free · 54m
This course covers Agentic Workflows, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 1 hours.
Hugging Face Agents Course
Hugging Face Learn · intermediate · Free
This course covers Agentic Workflows, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at an intermediate level.
Design ALM process for AI-powered business solutions
Microsoft Learn · intermediate · Free · 46m
This course covers Agentic Workflows, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at an intermediate level and can be completed in approximately 1 hours.
TypeScript (required)
GapCourses that may help you meet this requirement:
Modern Web Development with TypeScript Specialization
Coursera · beginner · $49/mo · 60h · ★ 4.7
This course directly covers TypeScript, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 60 hours.
Introduction to Angular
Coursera · beginner · $49/mo · 5h
This course directly covers TypeScript, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 5 hours.
Learn Typescript
Coursera · intermediate · $49/mo · 5h · ★ 4.5
This course directly covers TypeScript, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at an intermediate level and can be completed in approximately 5 hours.
JavaScript (required)
GapCourses that may help you meet this requirement:
Get started with web development using Visual Studio Code
Microsoft Learn · beginner · Free · 44m · ★ 4.8
This beginner course covers JavaScript, directly addressing the JavaScript skill gap required for the Senior Software Engineer, Trust and Third Party Risk Management role.
Meta Front-End Developer Professional Certificate
Coursera · beginner · $49/mo · 229h · ★ 4.7
This course covers JavaScript, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 229 hours.
Programming with JavaScript
Coursera · beginner · $49/mo · 47h · ★ 4.7
This course directly covers JavaScript, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 47 hours.
Large Language Models (required)
GapCourses that may help you meet this requirement:
Leverage AI tools and resources for your business
Microsoft Learn · beginner · Free · 42m · ★ 4.8
This course covers Large Language Models, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 1 hours.
Explore data roles and services
Microsoft Learn · beginner · Free · 22m · ★ 4.8
This course covers Large Language Models, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 0 hours.
Introduction to mixed reality
Microsoft Learn · beginner · Free · 41m · ★ 4.8
This course is not actually recommended for the Large Language Models skill gap, as there is no evidence (matched keywords) linking its mixed reality content to LLM skills required for the Senior Software Engineer role.
React (required)
GapCourses that may help you meet this requirement:
Meta Front-End Developer Professional Certificate
Coursera · beginner · $49/mo · 229h · ★ 4.7
This course covers React, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 229 hours.
React Basics
Coursera · beginner · $49/mo · 28h · ★ 4.7
This course directly covers React, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 28 hours.
Advanced React
Coursera · intermediate · $49/mo · 26h · ★ 4.6
This course directly covers React, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at an intermediate level and can be completed in approximately 26 hours.
GraphQL (required)
GapCourses that may help you meet this requirement:
GraphQL Mastery: From Fundamentals to Production Specialization
Coursera · beginner · $49/mo · 30h · ★ 4.0
This course directly covers GraphQL, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 30 hours.
GraphQL Fundamentals–Design APIs,Schema,Frontend Integration
Coursera · beginner · $49/mo · 9h
This course directly covers GraphQL, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 9 hours.
Get started with GraphQL in Microsoft Fabric
Microsoft Learn · beginner · Free · 1h
This beginner course directly covers GraphQL, addressing the skill gap required for the Senior Software Engineer role in a short, focused format.
Risk Management (required)
GapCourses that may help you meet this requirement:
Introduction to Risk Management
Coursera · beginner · $79/mo · 17h · ★ 4.7
This course directly covers Risk Management, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 17 hours.
Operational Risk Management: Frameworks & Strategies
Coursera · beginner · $79/mo · 6h · ★ 4.6
This course directly covers Risk Management, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting at a beginner level and can be completed in approximately 6 hours.
Privacy Law and Data Protection
Coursera · $79/mo · 13h · ★ 4.8
This course covers Risk Management, which appears as a requirement in the Senior Software Engineer, Trust and Third Party Risk Management posting and can be completed in approximately 13 hours.