Staff Product Engineer, TPRM

Drata•San Francisco, CA

2d•$165,000 - $270,000

About The Position

Drata is hiring a Staff Product Engineer to build and own workflows, integrations, and AI-powered experiences for its Third-Party Risk Management (TPRM) platform. The platform helps customers maintain vendor inventories, collect evidence such as SOC 2 reports and ISO certifications, evaluate evidence against their criteria with an AI agent, and produce audit-ready reports. The AI agent accelerates assessments, while humans retain responsibility for final risk and approval decisions. The engineer will own features end to end, from understanding customer problems through design, implementation, rollout, documentation, and production monitoring. The role emphasizes sound judgment, ownership, clear communication, and comfort working on under-defined problems, alongside strong engineering skills. The engineer will partner closely with Product, improve AI-agent experiences, manage releases and feature flags, monitor production health, and address bugs and technical debt. The role also contributes to technical direction across teams and product areas, including architecture and long-term planning. The expected base salary range is $165,000–$270,000. Total compensation may include equity and health and wellbeing benefits.

Requirements

8–10+ years of professional software engineering experience building and owning production systems end to end.
Proficiency in JavaScript and TypeScript across the stack.
Backend experience with Node.js and NestJS.
Front-end experience with React.
Experience with event-driven architecture and durable workflow orchestration, such as Temporal.
Strong grounding in relational databases, testing, observability and telemetry, and modern CI/CD practices.
Ability to operate across teams and product areas and own architecture and long-term technical direction.
Ability to make decisions spanning multiple areas and longer time horizons.
Ability to mentor across the team and close gaps between disparate parts of a system.
Ability to plan for the long term and avoid short-term-only solutions.
Strong judgment, ownership, comfort with ambiguity, and clear prioritization and communication.
Ability to understand the customer perspective and the vendor risk, TPRM, and compliance domain.

Nice To Haves

Experience in TPRM, vendor risk, GRC, or compliance domains.
Experience building or working alongside AI-powered product features.

Responsibilities

Own features from customer-problem discovery through design, implementation, rollout, documentation, and post-launch monitoring.
Manage feature-flag strategy and releases, including rollout.
Ensure features are usable and understood by treating UX and documentation as part of the deliverable.
Monitor production health and identify and resolve issues using strong signals.
Partner closely with Product to understand problems and propose improved approaches.
Address bugs and technical debt as part of ongoing work.
Build and improve AI-agent experiences used in assessment workflows.
Contribute to architecture and long-term technical direction across teams and product areas.
Set technical direction, serve as a primary escalation point, mentor teammates, and help unblock others.

Benefits

Stock equity.
Up to 100% employer-paid medical, dental, and vision premiums for employees and dependents.
Wellness benefits and healthcare concierge services.
401(k) plan.
Company-paid life and disability insurance.
Tax-advantaged spending accounts and discounted voluntary benefits.
Paid parental leave after six months of employment.
Kindbody fertility and family-building benefits and dedicated leave specialists.
Annual professional and personal development stipends.
Internal learning opportunities.
Flexible vacation policy.
Paid holidays.