Founding Infrastructure Security Enginee
About depthfirst
At depthfirst, we're driven by a critical mission: to secure the very foundation of modern civilization – software. We believe the proliferation of vulnerabilities poses an existential threat to integrity, security, and resilience. Our audacious goal is to build intelligence that not only detects but actively remediates critical software vulnerabilities at scale.
We're pioneering the next generation of security, training and scaling advanced security AI agents to discover elusive zero-day vulnerabilities across massive customer codebases and popular open-source projects. This isn't just a job; it's a chance to shape the future of software security.
Our founding team brings unparalleled expertise in data, infrastructure, security, and AI, with leaders from DeepMind, Databricks, Square, and Faire. If you're a thoughtful, driven professional excited to work at the cutting edge intersection of AI, Security, and Infrastructure, you belong with us.
The Opportunity: Founding Infrastructure Security Engineer
As one of our inaugural Security Engineers, you won't just maintain; you'll build. This is a rare opportunity to architect and own the core security foundations of depthfirst’s infrastructure from the ground up. You’ll be a vital partner to our infrastructure and product engineering teams, deeply embedding security by design. Your expertise will harden our critical cloud environment, strengthen identity and access management, and deliver the innovative tooling and automation that make secure configurations the undeniable default as we scale rapidly.
What You'll Do & The Impact You'll Make
Architect Security Foundations: As a founding member, you will define and shape our entire infrastructure security posture, identifying the highest-impact risks and driving comprehensive improvements from initial design through to production deployment.
Fortify Cloud Environments: Elevate our cloud security posture (e.g., Amazon AWS) across all layers, including IAM, networking, and system security, by engineering robust controls that enforce secure configurations by default.
Master Identity & Access: Strengthen identity and access management across our entire infrastructure and product ecosystem, collaborating with engineering teams on advanced authentication, authorization, human and workload identities, and secrets management.
Automate & Innovate: Design, write, and maintain production-grade software, tooling, and automation to proactively prevent security issues, detect configuration drift, and significantly reduce manual security effort.
Collaborate & Secure: Partner closely with infrastructure and product engineers, providing expert security reviews for designs, addressing vulnerabilities, and delivering practical, scalable security improvements that directly support business growth.
Build Detection & Response: Contribute to the maturity of our centralized security logging capabilities and help establish our detection and response framework as our security function expands.
What You'll Bring
Engineering & Security Mastery: Strong software engineering skills combined with a deep, practical understanding of security principles, best practices, and common vulnerabilities.
Proactive Problem-Solver: A proactive mindset, demonstrating a proven ability to identify and autonomously address security gaps or inefficiencies through innovative automation and tooling.
Impactful Deliverer: A track record of successfully delivering scalable security solutions and driving impactful changes across critical infrastructure in real-world, production environments.
Cloud Security Expertise: Demonstrated expertise in the security of cloud platforms (e.g., Amazon AWS), alongside familiarity with container security, orchestration security, and advanced authentication/authorization mechanisms.
Clear Communicator: Exceptional written and verbal communication skills, with the ability to articulate complex security issues clearly and persuasively to both highly technical and non-technical audiences.
Bonus Points Fo
Experience navigating the dynamic environment of a high-growth startup or early-stage company.
Familiarity with the security, infrastructure, or developer tooling markets.
Why Join Us?
Impact & Ownership: Directly influence the security posture of a company building intelligence to secure the world's software, with significant room for growth as we scale.
Competitive Rewards: Enjoy a competitive salary with meaningful equity ownership in a groundbreaking company.
Comprehensive Benefits: Health, vision, and dental insurance to keep you at your best.
Nourishment: Enjoy office lunch and dinner (for our SF office team).
—--
depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.