Senior Software Engineer, Corporate Security

About the role

About depthfirst

We believe that software is the foundation of modern civilization. Yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to secure the world's software.

depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-day vulnerabilities across large customer codebases and popular open source software.

Our founding team brings deep expertise in data, infrastructure, security and AI, with leaders from DeepMind, Databricks, Square, and Faire. We're looking for thoughtful, driven people excited to work at the intersection of AI, Security, and Infrastructure.

About This Role

As one of our first security engineers, you'll own corporate security at depthfirst, protecting the identities, devices, and applications our team relies on every day. You'll build the tooling, integrations, and automation that keep workforce access, endpoints, and enterprise apps secure by default as we grow.

You're excited about this role because you will...

- Shape our corporate security foundations as one of our first security engineers, protecting the devices, identities, and applications our team relies on every day.

- Strengthen workforce identity and access management through Okta and SSO, including phishing-resistant authentication, least privilege, and automated access provisioning and removal.

- Build and maintain endpoint security controls through mobile device management (MDM) and endpoint detection and response (EDR), improving device configurations, patching, and visibility across our fleet.

- Establish secure configurations for enterprise applications such as Google Workspace, Claude Cowork, and Codex, with appropriate controls for administrative access, data sharing, and integrations.

- Write and maintain software, integrations, and automation that enforce security policies, identify configuration gaps, and reduce manual work across identity, device, and application management.

Qualifications

- Strong software engineering skills and experience building reliable internal tools, API integrations, and automation to solve security or infrastructure problems.

- Hands-on experience with Okta or similar identity platforms, including SSO, MFA, access policies, and identity lifecycle management; familiarity with SAML, OIDC, and SCIM.

- Experience securing employee devices through MDM, including configuration enforcement, disk encryption, patch management, and policies that use device security posture to control access.

- Familiarity with EDR platforms, including deploying and maintaining coverage, investigating endpoint activity, and supporting containment and remediation.

- Experience securing enterprise SaaS applications and an understanding of the risks introduced by OAuth integrations, excessive permissions, external sharing, and AI tools with access to company data.