I was just looking at a job posting. It's fully remote, good pay, and almost a perfect match to my skill set. It's got a somewhat humanitarian aspect to its mission even if there are also profit motive aspects.

I looked at glass door, and the overwhelming majority of the reviews are, "it's not a bad place to work, but it doesn't have good work life balance." Or "expect startup culture hours".

If you want to see the job posting, DM me and I'm happy to share, but I don't want to publish a public link when I might apply for it.

My question for Tildes is, what experience do you have just saying no to overtime / forcing management to prioritize by just telling them you can't do everything / etc? Is this workable if your work is good and you make an effective contribution in a 40-50 hour week? What are your success or failure stories? Strategies you used for vetting the team / manager? Other things I should be thinking about?

Thanks as usual for any thoughts.

Hi Tilderinos,

I head up a small startup and we're looking to get some support for our data security. Up until now we've worked with small mom and pops that didn't have any requirements, but a few of our new clients have full data security teams and our infrastructure and policies/protocols aren't up to snuff. We reached out to a few consulting firms and they quotes us between $80-100k to get things set up and run us through a full SOC2 review. As a small company we don't really have that type of budget, more like $40-50k. I stumbled upon Vanta and Drata as alternatives and had meetings with their sales folks last week. Both of their offerings from setting up our protocols to monitoring and getting us through a SOC2 were only $16k.

Are platform based companies like Vanta or Drata enough to get us off the ground while we're still getting set up? Has anyone worked with them before and have any feelings one way or the other? Should we be signing on with a security consulting company - be it at a lower rate if we can negotiate it?
This is all quite new to me and any insight folks here can provide would be incredible useful.