> Markdown version of [/jobs/ext/3967668-staff-software-engineer](https://www.wearedevelopers.com/jobs/ext/3967668-staff-software-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Staff Software Engineer

- **Company:** Drata Inc
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $165,000.0 - $270,000.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Artificial Intelligence, Amazon Web Services, Continuous Integration, Relational Databases, Distributed Systems, Elasticsearch, Node.Js, Object-Relational Mapping, Redis, Software Engineering, TypeScript, Cloud Platform System, ReactJS, Large Language Models, Backend, Agentic-AI, Build Management, Low Latency, Api Design, NestJS, Data Pipelines
- **Published:** October 27, 2026
- **Apply:** https://startup.jobs/staff-software-engineer-evidence-frameworks-drata-com-10566726

## About the Role

* 10+ years of software engineering experience building and operating production systems, including customer-facing products you supported in production
 * A track record of technical leadership across multiple teams: setting direction, driving alignment, and delivering complex cross-team initiatives
 * Deep experience with distributed systems, data pipelines or integration-heavy platforms at meaningful scale
 * Strong backend fundamentals: API design, relational databases and data modeling, testing, observability, and CI/CD
 * Production experience with TypeScript/Node.js (our stack is TypeScript, NestJS and React). Strong engineers from other languages who can ramp quickly on TypeScript are encouraged to apply
 * Experience with at least one major cloud platform (AWS preferred) and infrastructure as code
 * Practical, everyday use of AI-assisted development tools, and good judgment about where AI belongs in a product
 * Clear written and verbal communication

Nice to have:

 * Experience in security, compliance, GRC or audit products
 * Experience building LLM-powered features or agentic workflows in production
 * Familiarity with NestJS, TypeORM, Jest, Redis and Elasticsearch
 * Experience in a startup or growth-stage environment, * 6 months: you're leading at least one cross-team initiative with measurable impact on reliability, scale or speed of delivery

## Description

Evidence & Frameworks is the engine behind Drata's promise of continuous compliance. Our teams build the systems that collect evidence from hundreds of integrations, map it to controls across dozens of frameworks (SOC 2, ISO 27001, HIPAA, NIST, the EU Cyber Resilience Act, AI standards and more), and keep thousands of customers audit-ready every day.

As a Staff Software Engineer, you'll be the technical leader across these teams. You'll set architectural direction for evidence collection and the framework and controls model, take on the hardest cross-team problems around scale, reliability and data correctness, and help us bring AI agents into these workflows safely. You'll stay hands-on while raising the bar for the engineers around you.

What you'll do:

 * Own the technical direction for evidence collection and the framework/controls data model, partnering with Product and Engineering leadership to shape the roadmap
 * Design and build scalable, reliable systems that ingest and process evidence across many integrations and tenants
 * Lead cross-team projects that are too big for one team, such as re-architecting a pipeline, introducing new frameworks for adding compliance standards faster, or migrating shared functionality
 * Bring AI and agentic capabilities into evidence and framework workflows with the right guardrails for accuracy, auditability and customer trust
 * Read your teams' system health (SLOs, errors, latency, deploy and change-failure signals), chase root causes, and turn recurring issues into roadmap work
 * Review architecture and code to ensure quality, scalability and security, while empowering teams to own implementation and delivery
 * Troubleshoot escalated performance and data-integrity issues through to resolution
 * Mentor engineers through design reviews, pairing and informal coaching, and communicate technical decisions clearly to engineers, product partners and leadership, * First 90 days: you understand the evidence and frameworks architecture and its pain points, and you've published a technical direction your teams and product partners agree on