Senior Software Engineer, Test Core

Vanta: the trust infrastructure for YC companies. The definitive leader in security and compliance, trusted by 16,000+ companies, including 1,000+ YC startups. The fastest path to your first enterprise deal Reach bigger logos, more revenue, and a stronger story by Demo Day with Vanta. As agents and automation accelerate your path to compliance, buyers get the proof they need to trust you now—not months from now. Your Trust Center launches immediately, giving prospects a live view of your security posture while audit prep is still underway. With 6,000+ Trust Centers across the Vanta network, you enter critical deals with real-time proof and credibility that would otherwise take years to build. "Choosing Vanta early unlocked $1.5M in deals and accelerated our growth by six months. Vanta is the fastest path to doing compliance right—when you're selling SaaS, buyers know the name." – Hyperbound (YC S23) Vanta gives you the fastest, most credible path to compliance across SOC 2, ISO 27001, and more Let the Vanta Agent handle the bulk of your compliance requirements, from guidance to audit-ready drafts Launch your Trust Center and Letter of Engagement on day one Start faster with pre-scoped requirements informed by 26,000+ audits Automate evidence collection across 400+ integrations Validate posture hourly with 1,400+ tests Find and fix gaps before they become audit findings Run your audit fully in-platform with startup-friendly, AICPA peer-reviewed firms Agentic compliance that runs itself Compliance shouldn’t become your CTO’s second job. The Vanta Agent acts as your compliance co-founder, handling the heavy lifting while your team stays focused on building. Grounded in 26,000+ audits and Vanta’s in-house GRC expertise, the Vanta Agent produces audit-ready drafts of policies, risk registers, vendor reviews, cloud security measures, and other core requirements. It also surfaces what needs attention, so your team can review, approve, and keep moving without slowing product development or adding compliance to the roadmap. Every output is tailored to your business and grounded in continuously validated data from The Trust Graph, the market’s deepest data and intelligence layer, rather than generic templates or disconnected AI responses. Vanta is also built for the way YC teams work. Through Vanta’s remote MCP server, full REST API, and native integrations with Claude, Codex, Cursor, and more, compliance moves forward directly inside the tools your team already uses to build, ship, and operate. “Vanta has saved us hundreds of hours and well over six figures in potential lost deals or added headcount. If you’re serious about security, start early.” – Clay The Vanta Agent can: Generate first-to-final drafts of core compliance requirements Tailor policies, risk registers, and vendor reviews to your business Collect and evaluate evidence continuously Scope controls and map requirements automatically Surface gaps, explain their impact, and recommend fixes, including code-level remediation guidance Cut security review time by 81% and vendor reviews by 50% The trusted standard Your first audit becomes part of your company’s reputation. It needs to hold up under enterprise scrutiny, from the platform and evidence to the auditor behind the report. Vanta is the platform your prospects already know, trust, and run on. Backed by 16,000+ customers, 26,000+ completed audits, AICPA peer-reviewed auditors, and in-house security and compliance experts, Vanta turns your first audit into your strongest sales asset. “We chose Vanta because of its reputation with enterprise buyers - when they see the Vanta logo on your Trust Center, you walk in with credibility that usually takes years to build. That matters when you're week four of your company.” – HiLoop (YC S26) Vanta gives you: Startup-friendly, AICPA peer-reviewed audit firms In-house former auditors and GRC practitioners who understand startup constraints and enterprise expectations A dedicated Auditor Portal A Trust Center enterprise buyers already recognize Two-thirds of the Forbes AI 50 run on Vanta, including Cursor, Lovable, Clay, Replit, and Sierra. When prospects see Vanta behind your security program, you enter critical deals with credibility already on your side. The platform you won’t outgrow The platform you choose for your first audit should still work when you add frameworks, close larger customers, and hire your first security leader. Vanta provides mature trust infrastructure from day one, right-sized for your first audit and built to support rapid growth without rework, replatforming, or waiting on a vendor’s roadmap. From one connected platform, you can establish the security foundations customers expect today and add more advanced capabilities as your business, risk, and compliance requirements grow. “With Vanta, we’ve been able to simplify the heavy lifting, gain real-time visibility into our security posture, and confidently maintain compliance as we scale.” – Cursor Why early teams start (and stay) with Vanta: Right-sized security foundations: Infrastructure and systems: cloud monitoring, endpoint protection, and access management Vendors and third parties: risk visibility and vendor reviews Security assessments: risk assessments and cyber insurance options Enterprise-ready capabilities: Third-Party Risk Management, 35+ frameworks, AI-powered Questionnaire Automation, and more Continuous innovation: 300+ product features shipped in 2025 Category-leading customers: Lovable, Ramp, Cursor, Instacart, Duolingo, Fin, GitHub, and more Long-term backing: Sequoia, Y Combinator, JPMorgan, Goldman Sachs, Wellington Management, and other leading investors Support you don’t have to fight for Vanta makes first-time compliance straightforward and predictable. You won’t have to wait on a consultant, ticket queue, or another founder’s calendar to understand what comes next. The Vanta Agent guides you through each requirement, drafts core compliance work, and surfaces exactly what needs attention so your program keeps moving. Our commitment to you: Agentic audit readiness with instant answers and real-time guidance In-house expertise from former auditors and GRC practitioners Community support through the Vanta Community and Slack onboarding Instructor-led training and on-demand learning 24/7 live chat and Help Center support Hands-on vCISO and implementation support Startup-friendly auditors ready to move at your speed We’re so confident in our support that we publish our performance metrics and G2 reviews—so you can hold us to it. Transparent pricing and YC-exclusive discounts YC companies get exclusive, discounted first-year pricing based on ARR or headcount: Essentials Package: Everything you need and nothing you don’t for first-time compliance One framework with pre-scoped controls The VantaI Agent: policy generation, evidence evaluation, and program Q&A, control mapping, policy change summaries, SLA tracking AI test remediation Trust Center & Letter of Engagement Personalized compliance roadmap Continuous controls monitoring Device monitoring, security awareness training, employee onboarding/offboarding Core Pricing: <$1M ARR (or <20 headcount): $7,200 $1M ARR (or >20 headcount): $9,000 Plus Package: Fastest path to compliance AND security foundations to build a trustworthy posture early. Everything in Essentials, plus: Questionnaire Automation (25 per year) Access Management Plus Pricing: <$1M ARR (or <20 headcount): $9,600 $1M ARR (or >20 headcount): $12,000 Optional add-ons include: Additional frameworks: $5,000 each 144 questionnaires/year: $9,000 Cyber insurance, powered by Vouch Background checks, powered by Certn