Senior Software Engineer, Corporate Security

DepthFirst; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

Equity

Health insurance

Lunch and dinner (SF)

Growth opportunities

Job summary

DepthFirst, based in San Francisco, is hiring one of its first security engineers to own corporate security. You will protect identities, devices, and enterprise apps, and build tooling, integrations, and automation to keep workforce access secure by default.

You will strengthen and implement Okta SSO, MFA, and least privilege; deploy and maintain MDM and EDR controls; secure Google Workspace and other SaaS apps; and write code to enforce security policies and reduce manual tasks across

Qualifications

• Strong software engineering skills with internal tooling/automation experience.
• Hands-on with identity platforms (Okta, SSO, MFA) and lifecycle management.
• Experience securing employee devices via MDM and enforcing device policies.
• Familiarity with EDR platforms and incident response workflows.
• Experience securing enterprise SaaS apps and managing OAuth risks.
• Strong written and verbal communication to explain security issues clearly.

Responsibilities

• Own corporate security as one of the first security engineers.
• Shape security foundations for identities, devices, and applications.
• Strengthen identity and access management with Okta and SSO.
• Build and maintain endpoint security controls via MDM and EDR.
• Write code and integrations to enforce security policies across identity, device, and apps.

Skills

Software engineering

Okta/SSO

MDM

EDR

SaaS security

Communication

Job description

About depthfirst

We believe that software is the foundation of modern civilization. Yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to secure the world's software.

depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-day vulnerabilities across large customer codebases and popular open source software.

Our founding team brings deep expertise in data, infrastructure, security and AI, with leaders from DeepMind, Databricks, Square, and Faire. We're looking for thoughtful, driven people excited to work at the intersection of AI, Security, and Infrastructure.

About This Role

As one of our first security engineers, you'll own corporate security at depthfirst, protecting the identities, devices, and applications our team relies on every day. You'll build the tooling, integrations, and automation that keep workforce access, endpoints, and enterprise apps secure by default as we grow.

You're excited about this role because you will...

• Shape our corporate security foundations as one of our first security engineers, protecting the devices, identities, and applications our team relies on every day.

• Strengthen workforce identity and access management through Okta and SSO, including phishing-resistant authentication, least privilege, and automated access provisioning and removal.

• Build and maintain endpoint security controls through mobile device management (MDM) and endpoint detection and response (EDR), improving device configurations, patching, and visibility across our fleet.

• Establish secure configurations for enterprise applications such as Google Workspace, Claude Cowork, and Codex, with appropriate controls for administrative access, data sharing, and integrations.

• Write and maintain software, integrations, and automation that enforce security policies, identify configuration gaps, and reduce manual work across identity, device, and application management.

Qualifications

• Strong software engineering skills and experience building reliable internal tools, API integrations, and automation to solve security or infrastructure problems.

• Hands‑on experience with Okta or similar identity platforms, including SSO, MFA, access policies, and identity lifecycle management; familiarity with SAML, OIDC, and SCIM.

• Experience securing employee devices through MDM, including configuration enforcement, disk encryption, patch management, and policies that use device security posture to control access.

• Familiarity with EDR platforms, including deploying and maintaining coverage, investigating endpoint activity, and supporting containment and remediation.

• Experience securing enterprise SaaS applications and an understanding of the risks introduced by OAuth integrations, excessive permissions, external sharing, and AI tools with access to company data.

• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non‑technical audiences.

Bonus Points For

• Experience at a high‑growth startup or early‑stage company

• Familiarity with security, infrastructure, or developer tooling markets

What We Offer

• Competitive salary with meaningful equity

• Health, vision, and dental insurance

• Office lunch and dinner (SF office)

• Ownership and significant room to grow as the company scales

depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.