Senior Software Engineer, Corporate Security at depthfirst in San Francisco

Job description

• Application
• As one of our first security engineers, you'll own corporate security at depthfirst, protecting the identities, devices, and applications our team relies on every day. You'll build the tooling, integrations, and automation that keep workforce access, endpoints, and enterprise apps secure by default as we grow.

Responsibilities

• You're excited about this role because you will...
• Shape our corporate security foundations as one of our first security engineers, protecting the devices, identities, and applications our team relies on every day.
• Strengthen workforce identity and access management through Okta and SSO, including phishing-resistant authentication, least privilege, and automated access provisioning and removal.
• Build and maintain endpoint security controls through mobile device management (MDM) and endpoint detection and response (EDR), improving device configurations, patching, and visibility across our fleet.
• Establish secure configurations for enterprise applications such as Google Workspace, Claude Cowork, and Codex, with appropriate controls for administrative access, data sharing, and integrations.
• Write and maintain software, integrations, and automation that enforce security policies, identify configuration gaps, and reduce manual work across identity, device, and application management.

Requirements

• Strong software engineering skills and experience building reliable internal tools, API integrations, and automation to solve security or infrastructure problems.
• Hands-on experience with Okta or similar identity platforms, including SSO, MFA, access policies, and identity lifecycle management; familiarity with SAML, OIDC, and SCIM.
• Experience securing employee devices through MDM, including configuration enforcement, disk encryption, patch management, and policies that use device security posture to control access.
• Familiarity with EDR platforms, including deploying and maintaining coverage, investigating endpoint activity, and supporting containment and remediation.
• Experience securing enterprise SaaS applications and an understanding of the risks introduced by OAuth integrations, excessive permissions, external sharing, and AI tools with access to company data.
• Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.
• Experience at a high-growth startup or early-stage company
• Familiarity with security, infrastructure, or developer tooling markets

Skills

Required

• Strong software engineering skills
• Familiarity with SAML, OIDC, and SCIM
• Familiarity with EDR platforms

Benefits

• Competitive salary with meaningful equity
• Health, vision, and dental insurance
• Office lunch and dinner (SF office)
• Ownership and significant room to grow as the company scales