Staff Product Engineer, TPRM

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're Dratanauts: a global crew of 600+ professionals united by a culture that rewards integrity, ownership, and raising the bar, no matter where in the world we're working from. Why Join the Drata Team? At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for: Problems without a playbook: You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go. Real ownership, not just process: Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them. A seat at the table: Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level. Growth at rocketship speed: Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience. A crew, not just coworkers: Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here and follow us on LinkedIn for company news, employee stories, and career updates. Job Summary: Drata's Third-Party Risk Management (TPRM) platform helps companies identify, assess, and continuously manage the risks that come from their vendors and other third parties. Instead of manually reviewing only their highest-risk vendors, our customers use Drata to run rigorous, consistent reviews across their entire vendor portfolio — maintaining a complete vendor inventory, collecting evidence like SOC 2 reports and ISO certifications, evaluating it against their own criteria with Drata's AI agent, and producing audit-ready reports. The agent accelerates the assessment work; humans stay responsible for final risk and approval decisions. We're looking for a Staff Product Engineer to build these workflows, integrations, and AI-powered experiences — and to own them end to end. At Drata, engineering doesn't stop at a merged pull request. You'll follow a feature from problem definition through design, rollout, documentation, and production monitoring, making sure customers are actually using and benefiting from what you ship. Strong engineering is expected, but the engineers who thrive here are defined by judgement, ownership, and communication at least as much as by code. What you’ll do: Own features end to end — from understanding the customer problem, through design and implementation, to rollout, documentation, and post-launch monitoring. Manage your own releases — own feature-flag strategy and the actual rollout, rather than handing off at merge. Treat UX and documentation as part of the deliverable — a feature isn't done until it's usable and understood. Monitor production health for your product area — catch and resolve issues from strong signals, not from customer complaints or escalations. Partner closely with Product — understand the problem before implementing, and propose better approaches when you see them. Address bugs and tech debt as part of the work, rather than deferring them indefinitely. Build with AI — develop and improve the AI agent experiences at the core of our assessment workflows. What you’ll bring: Technical skill is the foundation — but the qualities below are what set our best Product Engineers apart, and we weight them heavily: Judgement — You see the end-to-end picture from the customer's perspective and make sound decisions without needing every step specified. Ownership — You treat rollout, UX, documentation, and production health as yours, not someone else's. Comfort with ambiguity — You make meaningful progress on under-defined problems. Multiplier effect — You raise the people and teams around you through mentorship, strong reviews, and unblocking others. Domain depth — You invest in understanding our product and our customers' world (vendor risk, TPRM, compliance). Clear prioritization & communication — You judge urgency accurately, escalate at the right time, think one step ahead, and communicate clearly with both technical and non-technical partners. Requirements: Professional software engineering experience building and owning production systems end to end 8–10+ years Proficiency in JavaScript / TypeScript across the stack. (must have) Backend experience with Node.js / NestJS; front-end experience with React. Experience with event-driven architecture and durable workflow orchestration (e.g. Temporal). Solid grounding in relational databases, testing, observability/telemetry, and mode