Senior Product Engineer 2, TPRM

Job Summary

Drata's Third-Party Risk Management (TPRM) platform helps companies identify, assess, and continuously manage the risks that come from their vendors and other third parties. Instead of manually reviewing only their highest-risk vendors, our customers use Drata to run rigorous, consistent reviews across their entire vendor portfolio — maintaining a complete vendor inventory, collecting evidence like SOC 2 reports and ISO certifications, evaluating it against their own criteria with Drata's AI agent, and producing audit-ready reports. The agent accelerates the assessment work; humans stay responsible for final risk and approval decisions.

We're looking for a Senior Product Engineer to build these workflows, integrations, and AI-powered experiences — and to own them end to end. At Drata, engineering doesn't stop at a merged pull request. You'll follow a feature from problem definition through design, rollout, documentation, and production monitoring, making sure customers are actually using and benefiting from what you ship. Strong engineering is expected, but the engineers who thrive here are defined by judgement, ownership, and communication at least as much as by code.

What you’ll do

• Own features end to end — from understanding the customer problem, through design and implementation, to rollout, documentation, and post-launch monitoring.
• Manage your own releases — own feature-flag strategy and the actual rollout, rather than handing off at merge.
• Treat UX and documentation as part of the deliverable — a feature isn't done until it's usable and understood.
• Monitor production health for your product area — catch and resolve issues from strong signals, not from customer complaints or escalations.
• Partner closely with Product — understand the problem before implementing, and propose better approaches when you see them.
• Address bugs and tech debt as part of the work, rather than deferring them indefinitely.
• Build with AI — develop and improve the AI agent experiences at the core of our assessment workflows.

What you’ll bring

Technical skill is the foundation — but the qualities below are what set our best Product Engineers apart, and we weigh them heavily:

• Judgement — You see the end-to-end picture from the customer's perspective and make sound decisions without needing every step specified.
• Ownership — You treat rollout, UX, documentation, and production health as yours, not someone else's.
• Comfort with ambiguity — You make meaningful progress on under-defined problems.
• Multiplier effect — You raise the people and teams around you through mentorship, strong reviews, and unblocking others.
• Domain depth — You invest in understanding our product and our customers' world (vendor risk, TPRM, compliance).
• Clear prioritization & communication — You judge urgency accurately, escalate at the right time, think one step ahead, and communicate clearly with both technical and non-technical partners.

Requirements

• Professional software engineering experience building and owning production systems end to end 5+ years.
• Proficiency in JavaScript / TypeScript across the stack. (must have)
• Backend experience with Node.js / NestJS; front-end experience with React.
• Experience with event-driven architecture and durable workflow orchestration (e.g. Temporal).
• Solid grounding in relational databases, testing, observability/telemetry, and modern CI/CD practices.
• Owns a product area end to end.
• Delivers with minimal supervision and knows when to escalate.
• Makes sound calls within their area and challenges unclear requirements.
• Lifts peers and raises the review bar.
• Plans and delivers reliably through a project milestone.

Bonus

qualifications

• Experience in TPRM, vendor risk, GRC, or compliance domains.
• Experience building or working alongside AI-powered product features.

Explore how we invest in your Life at Drata .

The expected base salary range for this role is between $157,500 - $252,000 and is listed to provide transparency. Actual base pay will vary based on multiple factors — market location, job-related knowledge, skills, experience, and overall alignment to the role.