Senior Software Security Engineer, Infrastructure & Identity

DepthFirst; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Health, vision, and dental insurance

Office lunch and dinner (SF office)

Equity ownership and growth potential

Job summary

depthfirst is seeking a security engineer to own the security foundations of its infrastructure and work with product and infrastructure teams to harden the cloud environment. You will implement IAM controls, detect vulnerabilities, and build automation to make secure configurations the default as the company scales.

As one of the first security engineers, you will shape the security program, write tooling, and mature logging and incident response capabilities to support rapid growth in a

Qualifications

• Strong software engineering skills and deep understanding of security principles.
• Proactive mindset to identify gaps and automate security improvements.
• Track record delivering scalable security solutions across infrastructure.
• Expertise in cloud security, with IAM, networking, and authentication/authorization.
• Strong communication to explain security issues to diverse audiences.

Responsibilities

• Own security foundations of depthfirst's infrastructure and harden cloud environment.
• Improve cloud security posture across IAM, networking, and system security.
• Strengthen identity and access management across infrastructure and product teams.
• Write and maintain production tooling to prevent issues and detect drift.
• Review designs with engineers and deliver scalable security improvements.
• Mature centralized security logging and detection/response capabilities.

Skills

Security engineering

Automation & tooling

Cloud security (AWS)

IAM & authN/authZ

Vulnerability discovery & remediation

Tools

AWS

Job description

About depthfirst

We believe that software is the foundation of modern civilization. Yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to secure the world's software.

depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-day vulnerabilities across large customer codebases and popular open source software.

Our founding team brings deep expertise in data, infrastructure, security and AI, with leaders from DeepMind, Databricks, Square, and Faire. We're looking for thoughtful, driven people excited to work at the intersection of AI, Security, and Infrastructure.

About This Role

As one of our first security engineers, you'll own the security foundations of depthfirst's infrastructure. You'll partner closely with infrastructure and product engineers to harden our cloud environment, strengthen identity and access management, and build the tooling and automation that make secure configurations the default as we scale.

You’re excited about this role because you will…

• Shape our infrastructure security foundations as one of our first security engineers, identifying the highest-impact risks and driving improvements from design through production.

• Improve our cloud security posture across IAM, networking, and system security, building controls that make secure configurations the default.

• Strengthen identity and access management across our infrastructure and product, partnering with engineering teams on authentication, authorization, human and workload identities, and secrets management.

• Write and maintain production software, tooling, and automation to prevent security issues, detect configuration drift, and reduce manual security work.

• Work closely with infrastructure and product engineers to review designs, address vulnerabilities, and deliver practical security improvements that scale with the business.

• Help mature centralized security logging and our detection and response capabilities as the security function grows.

Qualifications

• Strong software engineering skills and deep understanding of security principles, best practices, and common vulnerabilities.

• A proactive mindset, with the ability to identify and address security gaps or inefficiencies through automation and tooling.

• A track record of delivering scalable solutions and driving impactful changes across infrastructure in real-world projects.

• Expertise in the security of cloud platforms (e.g., Amazon AWS), familiarity with container security, orchestration security, and authentication/authorization.

• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Bonus Points For

• Experience at a high-growth startup or early-stage company

• Familiarity with security, infrastructure, or developer tooling markets

What We Offer

• Competitive salary with meaningful equity

• Health, vision, and dental insurance

• Office lunch and dinner (SF office)

• Ownership and significant room to grow as the company scales

—-

depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.