Senior Software Security Engineer, Infrastructure & Identity

DepthFirst•San Francisco, CA

About The Position

depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-day vulnerabilities across large customer codebases and popular open source software. Our founding team brings deep expertise in data, infrastructure, security and AI, with leaders from DeepMind, Databricks, Square, and Faire. We're looking for thoughtful, driven people excited to work at the intersection of AI, Security, and Infrastructure. As one of our first security engineers, you'll own the security foundations of depthfirst's infrastructure. You'll partner closely with infrastructure and product engineers to harden our cloud environment, strengthen identity and access management, and build the tooling and automation that make secure configurations the default as we scale.

Requirements

Strong software engineering skills and deep understanding of security principles, best practices, and common vulnerabilities.
A proactive mindset, with the ability to identify and address security gaps or inefficiencies through automation and tooling.
A track record of delivering scalable solutions and driving impactful changes across infrastructure in real-world projects.
Expertise in the security of cloud platforms (e.g., Amazon AWS), familiarity with container security, orchestration security, and authentication/authorization.
Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Nice To Haves

Experience at a high-growth startup or early-stage company
Familiarity with security, infrastructure, or developer tooling markets

Responsibilities

Shape our infrastructure security foundations as one of our first security engineers, identifying the highest-impact risks and driving improvements from design through production.
Improve our cloud security posture across IAM, networking, and system security, building controls that make secure configurations the default.
Strengthen identity and access management across our infrastructure and product, partnering with engineering teams on authentication, authorization, human and workload identities, and secrets management.
Write and maintain production software, tooling, and automation to prevent security issues, detect configuration drift, and reduce manual security work.
Work closely with infrastructure and product engineers to review designs, address vulnerabilities, and deliver practical security improvements that scale with the business.
Help mature centralized security logging and our detection and response capabilities as the security function grows.