Security Product Engineer
About depthfirst
We believe that software is the foundation of modern civilization. Yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to secure the world's software.
depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-days vulnerabilities across large customer codebases and popular open source software.
Our founding team includes deep expertise in data, infrastructure, security and LLMs with technical leaders from DeepMind, Databricks, Square, and Faire. We are looking for strong technical people who are interested in working at the intersection of AI, Security, and Infrastructure.
About This Role
We're looking for a Security Product Engineer to work directly with customers to deploy and operationalize depthfirst's security AI agents in their environments. You'll be the technical bridge between our product and enterprise security infrastructure, ensuring our AI successfully detects vulnerabilities at scale.
You'll embed with customers to understand their security challenges, build custom integrations on top of depthfirst's platform, and partner closely with our product team to generalize solutions. This role combines hands-on engineering with deep customer collaboration—you'll shape both how customers use depthfirst and how our product evolves.
You're excited about this role because you will…
Embed with enterprise customers to deploy depthfirst's security AI agents into production environments
Build deep relationships with security teams, becoming a trusted advisor who understands their challenges
Translate customer problems into solutions: build custom integrations, data pipelines, and workflows that connect depthfirst with existing security tools
Bridge the gap between customers and product—identify patterns across deployments and collaborate with product to turn one-off solutions into platform capabilities
Communicate clearly with diverse stakeholders, from security engineers to CISOs
Own end-to-end technical delivery: from scoping to implementation and optimization
Travel to customer sites as needed to drive successful outcomes
Qualifications
3+ years of software engineering experience or relevant expertise
Excellent communication skills and genuine interest in working closely with customers to solve their problems
Experience in application security, penetration testing, or security research
Experience bridging customer needs and product capabilities, with a track record of collaborating with product teams to generalize solutions
Experience with security tooling, vulnerability management, or security-focused engineering
Proficiency in Python and experience building integrations, APIs, and data pipelines
Strong problem-solving skills with a bias toward action
Excitement about AI and security
Based in or willing to relocate to San Francisco
Bonus Points For
Experience with LLMs, AI agents, or AI platforms
Familiarity with enterprise security infrastructure (SIEM, SOAR, vulnerability management platforms)
Prior experience as a solutions engineer, security engineer, or forward deployed engineer
Open source contributions or experience with large codebases
What We Offer
Competitive salary with meaningful equity
Health, vision, and dental insurance
Office lunch and dinner (when working from our SF office)
Direct impact on customer success and product direction
The opportunity to work at the cutting edge of AI and security
depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.