Senior Software Engineer, Infrastructure and Security

About Vanta

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it.

Job Summary

Vanta’s Infrastructure & Security team provides a platform that powers the scalability, performance, and reliability of Vanta’s core systems. As our customer base continues to grow rapidly, we need infrastructure that scales with us without compromising speed or developer productivity. You’ll work on distributed systems, infrastructure primitives, and security enhancements that enable our engineers to ship reliable software at scale.

This team has a wide breadth of impact across all of product engineering. Our work touches every corner of product engineering and compounds in value; we make it easier for engineers to diagnose bugs, build features, and deliver value to customers quickly and safely.

Vanta engineers design and develop new product functionality and infrastructure leveraging modern frameworks and tooling, including TypeScript, React, Node.js, MongoDB, Github Actions, and various AWS services such as Fargate and ECS.

We have a kind, talented team, and while some have prior security experience, many have succeeded here without it. If you’re excited to work at the intersection of infrastructure and security, we’d love to meet you.

You will also:

• Design and build scalable infrastructure to support rapid growth in data volume, service usage, and engineering velocity
• Lead projects across our cloud infrastructure, including container orchestration (e.g., AWS Fargate, ECS), monitoring and alerting systems, networking, and database maintenance
• Implement and maintain core security infrastructure and controls including, service-to-service authentication, secrets management, application security primitives (e.g., rate-limiting, encryption libraries, etc.), and infrastructure hardening