---
title: 'Staff Software Engineer, Core GRC at Drata'
canonical: 'https://feeny.ai/job/staff-software-engineer-core-grc-drata-san-francisco-hhwmvvf97kgw'
type: 'job'
last_seen: '2026-09-07'
---

# Staff Software Engineer, Core GRC at Drata

- **Company:** Drata
- **Location:** San Francisco, CA
- **Compensation:** $201k–$272k
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-09-02
- **Last confirmed live:** 2026-09-07
- **Apply:** https://jobs.ashbyhq.com/drata/2a5487d8-9bfa-4a5e-9969-3c56aa7c25c0/application

**Skills:** Node.js, React, JavaScript, TypeScript, Object-oriented programming, RESTful web services, OAuth, SCIM, OIDC, RBAC, Relational databases, Git, CI/CD, Cloud platforms (AWS, GCP, or Azure), Infrastructure as code (Terraform or Pulumi), NestJS, TypeORM, Jest, Redis, ElasticSearch

> Technical leader designing scalable systems and guiding architectural decisions for Core GRC. Partners with product to shape roadmaps, troubleshoot complex issues, and mentor engineers across teams in a hybrid environment.

## Job description

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're Dratanauts: a global crew of 600+ professionals united by a culture that rewards integrity, ownership, and raising the bar, no matter where in the world we're working from.

Why Join the Drata Team? At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for:

- Problems without a playbook: You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go.
- Real ownership, not just process: Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them.
- A seat at the table: Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level.
- Growth at rocketship speed: Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience.
- A crew, not just coworkers: Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here https://drata.com/about/careers/life and follow us on LinkedIn https://www.linkedin.com/company/drata/posts/?feedView=all for company news, employee stories, and career updates.

Job Summary:

The Staff Software Engineer serves as a technical leader across multiple small teams. They design and build scalable systems, guide architectural decisions, and tackle complex challenges that span codebases and domains. They work closely with Product and Engineering leadership to shape the technical roadmap, ensure systems are reliable and secure, and drive key cross-team initiatives from idea to implementation. The role balances deep technical work, collaborative problem-solving, and mentoring in a distributed environment.

What you’ll do:

- Partner with Product to shape roadmap requirements and recommend the right technologies and design patterns.
- Review architecture and code for your team’s projects to ensure quality, scalability, and security—while empowering the team to own implementation and delivery.
- Troubleshoot performance and scalability issues escalated from your teams. Identify root causes, guide solutions, and see them through to resolution.
- Own and deliver cross-team projects that are difficult to tackle at the team level—such as introducing new frameworks, improving the developer experience, or migrating shared functionality.
- Mentor engineers across teams through guilds, office hours, and informal coaching.

What you’ll bring:

- 10+ years of experience as a software engineer, with a strong foundation in building and maintaining production systems.
- 3+ years of experience working with Node.js or React in production environments.
- 1+ years of experience with NestJS (preferred).
- Bachelor’s degree in Computer Science or a related technical field, or equivalent experience.
- Strong experience with authentication & authorization protocols like OAuth, SCIM, OIDC, and RBAC systems
- In depth knowledge of authentication and authorization systems from large third party providers

Strong proficiency with:

- JavaScript/TypeScript and object-oriented programming
- Building and consuming RESTful web services
- Networking protocols and relational databases
- Writing unit, integration, and end-to-end tests
- Using logging and telemetry tools to monitor and debug production systems
- Working with Git and modern CI/CD practices
- At least one major cloud platform (e.g., AWS, GCP, Azure) or infrastructure as code tools (e.g., Terraform, Pulumi)

Nice to have experience with:

- AI-assisted development tools
- TypeORM, Jest, Redis, and ElasticSearch

You’ve had success in roles where you:

- Successfully completed the migration of a large company to a complex, third-party authentication system.
- Led groups of engineers through feature delivery, from scoping and ticket creation to implementation and release
- Owned major products or features, balancing technical tradeoffs like quality vs. speed or team autonomy vs. alignment
- Built and scaled real-world web applications
- Worked in fast-paced environments, such as startups or growth-stage companies
- Communicated architectural decisions clearly across teams and kept stakeholders informed through status updates
- Balanced individual contributor work with time spent mentoring or unblocking teammates
- Adopted new technologies and introduced them thoughtfully into a codebase
- Used product development methodologies like Scrum, Kanban, or Lean

How we support you: At Drata, our people are our strongest advantage—and we prove it with support that exceeds industry standards. Our total rewards package is designed to power your well-being, accelerate your growth, and keep your work-life balance thriving.

Explore how we invest in your Life at Drata https://drata.com/about/life-at-drata?utm_source=chatgpt.com.

- Shared Success: We provide stock equity to ensure that as the company grows, you share directly in that success. Equity gives every employee a sense of ownership and the opportunity to celebrate our wins together—because your contributions don’t just support our progress; they help drive our collective success.
- Health & Wellness: Up to 100% employer-paid premiums for medical, dental, and vision coverage for employees and their dependents, along with comprehensive wellness benefits and healthcare concierge services designed to support your needs beyond traditional insurance.
- Financial Well-being: A comprehensive suite of financial benefits, including a 401(k) plan, company-paid life and disability insurance, tax-advantaged spending accounts, and a range of discounted voluntary offerings to help you customize and strengthen your overall financial position.
- Family Support: We want to support you in life's most important moments, so we offer a paid Parental Leave policy, after six months of employment. Employees also receive access to Kindbody fertility and family-building benefits and dedicated leave specialists who help guide you through the entire process.
- Growth & Development: Generous annual stipends for both professional and personal development, empowering you to invest in your continued growth. You’ll also have access to a wide range of internal learning opportunities, ensuring you can build new skills, deepen your expertise, and advance your career with confidence.
- Time Off & Flexibility: We believe that to do your best work, you should get the time you need for rest, rejuvenation and recovery. Drata offers a flexible vacation policy, paid holidays, and other perks to recharge.

The expected base salary range for this role is between $200,700 - $271,500 and is listed to provide transparency. Actual base pay will vary based on multiple factors — market location, job-related knowledge, skills, experience, and overall alignment to the role.

Candidates shouldn't expect automatic placement at any particular point within the range. Offer amounts are determined by the qualifications each candidate brings to the position. Total compensation may also include equity designed to provide meaningful ownership in the company, as well as health and wellbeing benefits.

## About Drata

## Company Overview
- **One-liner**: Drata is an agentic trust management platform that automates security compliance, risk management, and continuous control monitoring for enterprises.
- **Entity Type**: Private (Series C)
- **Headquarters**: San Francisco, California, USA (with offices in San Diego, New York, London, and Sydney)
- **Founded**: 2020
- **Founders**: Adam Markowitz (CEO), Troy Markowitz (COO), Daniel Marashlian (CTO)

## Core Business
- **Primary industry**: Governance, Risk, and Compliance (GRC) / Security Compliance Automation
- **Target customers**: B2B, primarily mid-market and enterprise companies needing SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and ISO 42001 compliance
- **Mission statement**: To build the trust layer between great companies, enabling organizations to automate compliance, manage risk, and prove trust continuously.

## Products & Services
- **Agentic Trust Management Platform**: An integrated platform that uses autonomous AI agents to automate compliance, manage internal and third-party risk, and continuously prove security posture. Key capabilities include:
  - **Continuous Compliance**: Automated evidence collection, control mapping, and monitoring across multiple frameworks.
  - **Agent Governance**: Discovers and governs all AI agents running in an enterprise environment, enforcing policies before actions execute.
  - **Third-Party Risk Management**: Automates vendor assessment and questionnaire responses.
  - **Continuous Real-Time Trust**: Monitors controls automatically, flags risks immediately, and shares always-current proof externally.
  - **Enterprise-Grade GRC**: Supports global organizations across teams, business units, and evolving requirements.

## Market Standing
- **Valuation/Total Funding**: Not publicly disclosed, but Drata is backed by prominent venture capital firms (see below).
- **Key Metric**: Over 8,500 global customers; processes millions of evidence items daily.
- **Notable Investors/Partners**: Backed by experienced venture investors (specific names not listed on site, but the company has raised significant Series C funding).
- **Growth Signals**: 
  - Rapid customer growth to 8,500+ customers since founding in 2020.
  - Expansion from pure compliance automation to a full "agentic trust management" platform.
  - Global presence with offices in five cities across the US, UK, and Australia.
  - High customer satisfaction: 4.8/5.0 on G2 Reviews.
  - Active hiring across multiple engineering and business roles, indicating continued scaling.

## Competitive Advantages
- **Agentic AI-first approach**: Uses autonomous AI agents to automate compliance tasks, differentiate from legacy GRC tools that require heavy manual work.
- **Continuous trust model**: Moves beyond point-in-time audits to always-current security posture, a key differentiator versus traditional compliance software.
- **Broad framework support**: SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, ISO 42001, and more — reducing the need for multiple tools.
- **Enterprise-grade flexibility**: Designed for global organizations with complex team structures and multi-framework requirements.
- **Founder background**: CEO Adam Markowitz brings a unique perspective from his experience as an aerospace engineer on NASA’s Space Shuttle Program, emphasizing a systems-thinking approach to trust and documentation.

## Strategic Focus
- **Agentic Trust**: Expanding the platform to govern and monitor AI agents themselves, positioning Drata as the trust layer for the age of autonomous AI.
- **Enterprise scale**: Deepening capabilities for large, global organizations with complex compliance needs.
- **Continuous compliance**: Shifting the market from periodic audits to real-time, always-on trust verification.
- **International expansion**: Growing presence in EMEA and APAC via offices in London and Sydney.

## Why Work Here
- **Culture**: Emphasizes core values of "Automation-First," "Customer-Obsessed," "Built on Trust," "Act with Integrity," and "Competitive Fire." Describes itself as a mission-driven crew ("Dratanauts") building the foundations of digital trust.
- **Remote/Hybrid Policy**: Hybrid roles in San Francisco, San Diego, New York; some fully remote positions available (e.g., Senior AI Engineer, Remote - US). Offers an annual stipend to enhance home office setup.
- **Notable Perks**:
  - Comprehensive health coverage (medical, dental, vision) up to 100% employer-paid premiums.
  - Paid parental leave after six months.
  - Annual stipends for personal and professional development.
  - Flexible time-off policy and half-day Fridays every other week in summer.
  - 401k or pension plans (region-specific), life and disability insurance.
  - Diversity-focused culture: "Unique perspectives provide a better shared view of a problem and its possible solutions."
- **Engineering Culture**: Heavy investment in AI and platform engineering; roles include AI Product Engineer, Applied Research Engineer, Platform Engineer, and Site Reliability Engineer. The tech stack is modern and focused on building agentic systems.

## Sources
1. [drata.com](https://drata.com/)
2. [drata.com/about](https://drata.com/about)
3. [drata.com/about/careers](https://drata.com/about/careers)
4. [drata.com/about/life-at-drata](https://drata.com/about/life-at-drata)
5. [jobs.ashbyhq.com/drata](https://jobs.ashbyhq.com/drata)

## Other roles at Drata

- [Customer Education Manager](https://feeny.ai/job/customer-education-manager-drata-united-states-jdkcpmg16fxr) — United States
- [Senior Manager, Commercial Account Management](https://feeny.ai/job/senior-manager-commercial-account-management-drata-united-states-m7ftde3dwpse) — United States
- [Senior Product Manager](https://feeny.ai/job/senior-product-manager-drata-san-francisco-2fesj71vvpcw) — San Francisco, CA
- [Senior Platform Operations Manager](https://feeny.ai/job/senior-platform-operations-manager-drata-san-francisco-prwwxkesf2wm) — San Francisco, CA
- [Senior Executive Business Partner, CEO's Office](https://feeny.ai/job/senior-executive-business-partner-ceo-s-office-drata-united-states-2grxfb5yvngt) — United States
- [Principal Product Operations Manager](https://feeny.ai/job/principal-product-operations-manager-drata-united-states-672kf4g4mq4a) — United States
- [Senior Sales Engineer - London](https://feeny.ai/job/senior-sales-engineer-london-drata-london-nkjm8cf6k4vc) — London, United Kingdom
- [Sales Engineer - London](https://feeny.ai/job/sales-engineer-london-drata-london-a2dbd3jsqf56) — London, United Kingdom
- [Enterprise Account Executive - EMEA](https://feeny.ai/job/enterprise-account-executive-emea-drata-emea-py8g6jm9anhz) — EMEA
- [Total Rewards Analyst](https://feeny.ai/job/total-rewards-analyst-drata-united-states-av9pgqh5f5zw) — United States