About the job
At Vanta, we are dedicated to empowering businesses to build and demonstrate trust effortlessly. Our belief is that security should be an ongoing, verifiable process, and we equip organizations with the tools to enhance their security practices seamlessly. Our team is not only skilled but also supportive, drawing talent from diverse backgrounds, many without prior security experience.
The Infrastructure & Security team at Vanta is the backbone of our platform, ensuring our core systems are scalable, high-performing, and resilient. As we witness rapid growth in our customer base, we require infrastructure that adapts without sacrificing speed or developer efficiency. In this role, you will engage with distributed systems, foundational infrastructure components, and security improvements that empower our engineers to deploy reliable software at scale.
Our work significantly influences all aspects of product engineering, simplifying processes for engineers to identify bugs, develop features, and deliver value to customers swiftly and securely.
At Vanta, our engineers innovate by creating new functionalities and infrastructure, utilizing modern technologies such as TypeScript, React, Node.js, MongoDB, GitHub Actions, and various AWS services like Fargate and ECS.
We pride ourselves on our inclusive and talented team. While some members bring prior security expertise, many thrive here without it. If you are passionate about the intersection of infrastructure and security, we would love to connect with you.
Explore our Vanta Engineering Blog to discover more about our projects!
Your responsibilities will include:
Designing and constructing scalable infrastructure to accommodate rapid increases in data volume, service usage, and engineering speed.
Leading initiatives across our cloud infrastructure, encompassing container orchestration (e.g., AWS Fargate, ECS), monitoring and alerting systems, networking, and database management.
Implementing and upholding core security frameworks and controls, including service-to-service authentication, secrets management, application security features (e.g., rate-limiting, encryption libraries), and infrastructure fortification.
Identifying and resolving intricate scalability and performance issues, particularly...
