---
title: 'Senior Software Engineer, Corporate Security at DepthFirst'
canonical: 'https://feeny.ai/job/senior-software-engineer-corporate-security-depthfirst-san-francisco-3aadyxq5thky'
type: 'job'
last_seen: '2026-09-26'
---

# Senior Software Engineer, Corporate Security at DepthFirst

- **Company:** DepthFirst
- **Location:** San Francisco, CA
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-09-23
- **Last confirmed live:** 2026-09-26
- **Apply:** https://jobs.ashbyhq.com/depthfirst/27ba661c-a6e4-407d-af78-ea61790ac925

## Job description

## About depthfirst

We believe that software is the foundation of modern civilization. Yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to secure the world's software. depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-day vulnerabilities across large customer codebases and popular open source software. Our founding team brings deep expertise in data, infrastructure, security and AI, with leaders from DeepMind, Databricks, Square, and Faire. We're looking for thoughtful, driven people excited to work at the intersection of AI, Security, and Infrastructure.

## About This Role

As one of our first security engineers, you'll own corporate security at depthfirst, protecting the identities, devices, and applications our team relies on every day. You'll build the tooling, integrations, and automation that keep workforce access, endpoints, and enterprise apps secure by default as we grow.

You're excited about this role because you will...

- Shape our corporate security foundations as one of our first security engineers, protecting the devices, identities, and applications our team relies on every day.
- Strengthen workforce identity and access management through Okta and SSO, including phishing-resistant authentication, least privilege, and automated access provisioning and removal.
- Build and maintain endpoint security controls through mobile device management (MDM) and endpoint detection and response (EDR), improving device configurations, patching, and visibility across our fleet.
- Establish secure configurations for enterprise applications such as Google Workspace, Claude Cowork, and Codex, with appropriate controls for administrative access, data sharing, and integrations.
- Write and maintain software, integrations, and automation that enforce security policies, identify configuration gaps, and reduce manual work across identity, device, and application management.

## Qualifications

- Strong software engineering skills and experience building reliable internal tools, API integrations, and automation to solve security or infrastructure problems.
- Hands-on experience with Okta or similar identity platforms, including SSO, MFA, access policies, and identity lifecycle management; familiarity with SAML, OIDC, and SCIM.
- Experience securing employee devices through MDM, including configuration enforcement, disk encryption, patch management, and policies that use device security posture to control access.
- Familiarity with EDR platforms, including deploying and maintaining coverage, investigating endpoint activity, and supporting containment and remediation.
- Experience securing enterprise SaaS applications and an understanding of the risks introduced by OAuth integrations, excessive permissions, external sharing, and AI tools with access to company data.
- Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Bonus Points For

- Experience at a high-growth startup or early-stage company
- Familiarity with security, infrastructure, or developer tooling markets

## What We Offer

- Competitive salary with meaningful equity
- Health, vision, and dental insurance
- Office lunch and dinner (SF office)
- Ownership and significant room to grow as the company scales

—- depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law. To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.

## About DepthFirst

## Company Overview
- **One-liner**: Autonomous security platform that uses AI to continuously find, validate, and fix exploitable vulnerabilities across code, infrastructure, dependencies, and runtime environments.
- **Entity Type**: Private (Series B, $80M total funding)
- **Headquarters**: San Francisco, California, United States
- **Founded**: Not publicly available
- **Founders**: Qasim Mithani, Daniele Perito, Andrea Michi

## Core Business
- **Primary industry**: Cybersecurity (AI-native autonomous security)
- **Target customers**: B2B, Enterprise (developers, security teams, CISOs)
- **Mission or purpose statement**: "Secure the world’s most important software."

## Products & Services
- **Agentic Pentesting**: Autonomous penetration testing that runs dynamic exploits against running applications to confirm real attack paths.
- **Supply Chain Security**: Traces risk through full dependency trees and surfaces only vulnerabilities with a real execution path.
- **Secrets & Sensitive Data**: Detects and validates credentials across codebase, CI/CD pipelines, and runtime environments.
- **Code Security**: Finds vulnerabilities by tracing business logic, data flows, and cross-service interactions across the codebase.
- **Dependency Firewall**: Detects and blocks malicious behavior before it spreads in the environment.
- **Fix & Verify**: Generates merge-ready pull requests for every confirmed vulnerability, then replays the attack post-fix to ensure the vulnerability is truly resolved.

## Market Standing
- **Valuation**: Not disclosed (private company)
- **Key Metric**: Total funding $80M (Series B announced March 2026, led by Meritech Capital Partners; Series A with 12 investors)
- **Notable Investors/Partners**: Meritech Capital Partners (lead Series B), plus 12 Series A investors. Backed by leading investors in AI, security, and software.
- **Growth Signals**: 33 employees (366.7% YoY growth); 11 active job postings; claims 8x more true positives and 95% fewer false positives vs. leading tools; 90% of fixes accepted by developers; $5M in platform credits offered to open source maintainers via the Open Defense Initiative.

## Competitive Advantages
- **AI-native context-aware reasoning** – The platform understands code, business logic, and infrastructure to find complex vulnerabilities (including business logic flaws and chained exploits) that siloed tools miss.
- **Extremely low false positives and high fix acceptance** – 95% false positive reduction and 90% developer-accepted fixes create trust and productivity.
- **Founding team** – Built security at Cash App/Faire, infrastructure at AWS/Databricks, and AI research at Google DeepMind (contributions to Gemini, AlphaDev, Nature publications).
- **Continuous autonomous verification** – After each fix, the same attack is replayed in the running application; vulnerabilities are only closed when exploitation fails, not when code changes.

## Strategic Focus
- Advancing AI agents for security through reinforcement learning (training vulnerability discovery agents, e.g., dfs-mini1 model).
- Scaling enterprise adoption and expanding the Open Defense Initiative to secure widely deployed open source projects.
- Building a research-driven applied AI lab focused on software security.

## Why Work Here
- **Culture**: Positioned as an "applied AI lab" at the frontier of security and AI research. Team members come from top companies like Databricks, Meta, Google DeepMind, Faire, and Notion.
- **Work policy**: On-site in San Francisco (multiple offices, including 250 Montgomery St and 1 Sutter St).
- **Open roles**: 11 positions across Engineering (Backend, Product, Security, Research), Sales (Account Executive, SDR, Solutions Engineer), Product Design, and Business Operations.
- **Notable perks**: Not explicitly detailed but typical for well-funded Series B startups; equity, competitive compensation, and the chance to work on cutting-edge autonomous security in a rapidly growing team.

## Sources
1. [depthfirst.com](https://depthfirst.com/)
2. [jobs.ashbyhq.com/depthfirst](https://jobs.ashbyhq.com/depthfirst)
3. [depthfirst.com/about](https://depthfirst.com/about)
4. [linkedin.com/company/depthfirst](https://www.linkedin.com/company/depthfirst)
5. [builtin.com/company/depthfirst](https://builtin.com/company/depthfirst)

## Other roles at DepthFirst

- [Designer (Product + Brand)](https://feeny.ai/job/designer-product-brand-depthfirst-san-francisco-9nbk4635yq03) — San Francisco, CA
- [Senior Software Security Engineer, Infrastructure & Identity](https://feeny.ai/job/senior-software-security-engineer-infrastructure-identity-depthfirst-san-4z7tqza00za0) — San Francisco, CA
- [GTM Engineer](https://feeny.ai/job/gtm-engineer-depthfirst-san-francisco-p28z932vakx0) — San Francisco, CA
- [Recruiting Coordinator](https://feeny.ai/job/recruiting-coordinator-depthfirst-san-francisco-5cyt00c1955d) — San Francisco, CA
- [Technical Account Manager](https://feeny.ai/job/technical-account-manager-depthfirst-san-francisco-q9z1adhzcasb) — San Francisco, CA
- [Analytics & GTM Operations Lead](https://feeny.ai/job/analytics-gtm-operations-lead-depthfirst-san-francisco-m2bpyhgeyqyh) — San Francisco, CA
- [Recruiter](https://feeny.ai/job/recruiter-depthfirst-san-francisco-nctmw46zw084) — San Francisco, CA
- [Product Marketing Lead](https://feeny.ai/job/product-marketing-lead-depthfirst-san-francisco-hyzqtxyagt3g) — San Francisco, CA
- [Product Manager](https://feeny.ai/job/product-manager-depthfirst-san-francisco-mhm9q7m349mm) — San Francisco, CA
- [Sales Development Representative](https://feeny.ai/job/sales-development-representative-depthfirst-san-francisco-2bmyvnhjc5t1) — San Francisco, CA