Senior Software Security Engineer, Infrastructure & Identity

About depthfirst

We believe that software is the foundation of modern civilization. Yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to secure the world's software.

depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-day vulnerabilities across large customer codebases and popular open source software.

Our founding team brings deep expertise in data, infrastructure, security and AI, with leaders from DeepMind, Databricks, Square, and Faire. We're looking for thoughtful, driven people excited to work at the intersection of AI, Security, and Infrastructure.

About This Role

As one of our first security engineers, you'll own the security foundations of depthfirst's infrastructure. You'll partner closely with infrastructure and product engineers to harden our cloud environment, strengthen identity and access management, and build the tooling and automation that make secure configurations the default as we scale.

You're excited about this role because you will...

• Shape our infrastructure security foundations as one of our first security engineers, identifying the highest-impact risks and driving improvements from design through production.
• Improve our cloud security posture across IAM, networking, and system security, building controls that make secure configurations the default.
• Strengthen identity and access management across our infrastructure and product, partnering with engineering teams on authentication, authorization, human and workload identities, and secrets management.
• Write and maintain production software, tooling, and automation to prevent security issues, detect configuration drift, and reduce manual security work.
• Work closely with infrastructure and product engineers to review designs, address vulnerabilities, and deliver practical security improvements that scale with the business.
• Help mature centralized security logging and our detection and response capabilities as the security function grows.

Qualifications

• Strong software engineering skills and deep understanding of security principles, best practices, and common vulnerabilities.
• A proactive mindset, with the ability to identify and address security gaps or inefficiencies through automation and tooling.
• A track record of delivering scalable solutions and driving impactful changes across infrastructure in real-world projects.
• Expertise in the security of cloud platforms (e.g., Amazon AWS), familiarity with container security, orchestration security, and authentication/authorization.
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Bonus Points For

• Experience at a high-growth startup or early-stage company
• Familiarity with security, infrastructure, or developer tooling markets

What We Offer

• Competitive salary with meaningful equity
• Health, vision, and dental insurance
• Office lunch and dinner (SF office)
• Ownership and significant room to grow as the company scales

—-

depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.