At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. 

As a Security Analyst on our Vendor Risk Management team, you will be the analytical engine that drives the quality and intelligence of our scanning platform, translating massive datasets into direct product improvements.

Our team is at the forefront of Vanta's mission to secure the internet. We focus on monitoring the external attack surface of countless organizations, which directly fuels our Vendor Risk Management (VRM) product. In this role, you are a crucial partner to both engineering and research. In this role you'll dive deep into our scanning signals at scale to analyze detection quality, identify systemic patterns of false positives, and draw insights that guide the future of the product.

What you’ll do as a Security Analyst, Vendor Risk Management at Vanta:

• Perform deep-dive analysis on raw scanning signals to assess the quality, accuracy, and fidelity of our vulnerability detections.

• Systematically identify and analyze false positives and false negatives, working with Researchers to refine detection logic and improve signal-to-noise.

• Use data analysis to draw insights about our detection coverage, classification accuracy, and overall data quality, directly impacting the product roadmap.

• Collaborate with Security Researchers by providing data-driven analysis to guide new research and pinpoint high-impact areas for investigation.

• Develop and monitor key performance indicators (KPIs) and dashboards related to our detection quality and scanning operations.

• Work with the Engineering team to provide feedback on data models and platform capabilities needed for better analysis.

How to be successful in this role:

• Proven experience in a data-driven role, such as a Data Analyst, Security Data Analyst, Product Analyst, or BI Analyst.

• Strong analytical skills with the ability to query, manipulate, and draw insights from large, complex datasets (e.g., SQL, Python with Pandas, or similar).

• A foundational understanding of cybersecurity concepts (e.g., networking, vulnerabilities, cloud infrastructure) and a strong desire to learn more.

• Excellent problem-solving skills and a meticulous attention to detail.

• Experience in measuring and reporting on data quality or product performance is a significant plus.

• Self-motivated and capable of working both independently and collaboratively within a team.

• Strong communication skills, with the ability to translate complex data findings into clear, actionable recommendations.

What you can expect as a Vantan:

• Industry-competitive salary and equity

• Health plan premium reimbursement

• Pension contribution

• 16 weeks fully paid parental leave for all new parents

• Health & wellness stipend

• Remote workspace stipend

• Flexible work hours and location

• Virtual team building activities, lunch and learns, and other company-wide events!

#LI-remote

At Vanta, we are committed to hiring diverse talent of different backgrounds and as such, it is important to us to provide an inclusive work environment for all. We do not discriminate on the basis of race, gender identity, age, religion, sexual orientation, veteran or disability status, or any other protected class. As an equal opportunity employer, we encourage and welcome people of all backgrounds to apply.

About Vanta

We started in 2018, in the wake of several high-profile data breaches. Online security was only becoming more important, but we knew firsthand how hard it could be for fast-growing companies to invest the time and manpower it takes to build a solid security foundation. Vanta was inspired by a vision to restore trust in internet businesses by enabling companies to improve and prove their security. From our early days automating security monitoring for compliance standards like SOC 2, HIPAA and ISO 27001 to creating the world's leading Trust Management Platform, our vision remains unchanged. 

Now more than ever, making security continuous—not just a point-in-time check— is essential. Thousands of companies rely on Vanta to build, maintain and demonstrate their trust— all in a way that's real-time and transparent.