Senior Software Engineer, Corporate Security
DepthFirst12 hours ago
Responsibilities
- Own and shape corporate security foundations covering workforce identities, devices, and enterprise applications.
- Strengthen identity and access management through Okta and SSO, including phishing-resistant authentication, least privilege, and automated access provisioning and removal.
- Build and maintain MDM and EDR controls for device configuration, patching, endpoint visibility, investigation, containment, and remediation.
- Establish secure configurations and administrative, data-sharing, and integration controls for Google Workspace, Claude Cowork, Codex, and other enterprise applications.
- Build and maintain software, integrations, and automation that enforce security policies, identify configuration gaps, and reduce manual security work.
- Explain complex security issues to technical and non-technical audiences.
Requirements
- Strong software engineering skills and experience building reliable internal tools, API integrations, and automation for security or infrastructure problems.
- Hands-on experience with Okta or similar identity platforms, including SSO, MFA, access policies, and identity lifecycle management.
- Familiarity with SAML, OIDC, and SCIM.
- Experience securing employee devices through MDM, including configuration enforcement, disk encryption, patch management, and device-security-posture-based access policies.
- Familiarity with EDR platforms, including deploying and maintaining coverage, investigating endpoint activity, and supporting containment and remediation.
- Experience securing enterprise SaaS applications and understanding risks from OAuth integrations, excessive permissions, external sharing, and AI tools with company-data access.
- Strong written and verbal communication skills.
- Experience at a high-growth startup or early-stage company is a bonus.
- Familiarity with security, infrastructure, or developer tooling markets is a bonus.
Benefits
- Competitive salary with meaningful equity.
- Health, vision, and dental insurance.
- Office lunch and dinner are provided at the San Francisco office.
- Significant ownership and room to grow as the company scales.
Categories
About DepthFirst
DepthFirst builds an AI-driven security platform that analyzes source code, infrastructure, and business logic to detect and help remediate software vulnerabilities, including potential zero-days. It sells enterprise security software and services to engineering and security teams at organizations with large codebases and open-source dependencies. Privately held and headquartered in San Francisco, the company focuses on general security intelligence delivered by AI agents that continuously scan customer and popular open-source projects.