← All roles

Senior Software Engineer, Corporate Security

depthfirst· Engineering
Apply on company site
San FranciscoFull-timePosted 4w ago

About the role

Senior security-focused software engineer responsible for owning corporate security, building tooling and automation to protect identities, devices, and applications, and improving security configurations across workforce identity, endpoints, and enterprise apps at depthfirst.

Responsibilities

  • Shape our corporate security foundations as one of our first security engineers, protecting the devices, identities, and applications our team relies on every day.
  • Strengthen workforce identity and access management through Okta and SSO, including phishing-resistant authentication, least privilege, and automated access provisioning and removal.
  • Build and maintain endpoint security controls through mobile device management (MDM) and endpoint detection and response (EDR), improving device configurations, patching, and visibility across our fleet.
  • Establish secure configurations for enterprise applications such as Google Workspace, Claude Cowork, and Codex, with appropriate controls for administrative access, data sharing, and integrations.
  • Write and maintain software, integrations, and automation that enforce security policies, identify configuration gaps, and reduce manual work across identity, device, and application management.

Qualifications

  • Strong software engineering skills and experience building reliable internal tools, API integrations, and automation to solve security or infrastructure problems.
  • Hands-on experience with Okta or similar identity platforms, including SSO, MFA, access policies, and identity lifecycle management; familiarity with SAML, OIDC, and SCIM.
  • Experience securing employee devices through MDM, including configuration enforcement, disk encryption, patch management, and policies that use device security posture to control access.
  • Familiarity with EDR platforms, including deploying and maintaining coverage, investigating endpoint activity, and supporting containment and remediation.
  • Experience securing enterprise SaaS applications and an understanding of the risks introduced by OAuth integrations, excessive permissions, external sharing, and AI tools with access to company data.
  • Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.

Skills

Required:Software engineeringOkta / Identity platformsMDM / EDREDR platformsEnterprise SaaS securityCommunication

Benefits

  • Competitive salary with meaningful equity
  • Health, vision, and dental insurance
  • Office lunch and dinner (SF office)
  • Ownership and significant room to grow as the company scales
Last updated Sep 25, 2026. Interested? Apply on the company site.
depthfirst logo

About depthfirst

Autonomous Security from Design to Production

An AI-native platform that understands your code, business logic, and infrastructure to find more vulnerabilities, slash false positives, and give developers actionable fixes in their workflow.

SecurityAIVulnerability DetectionStatic AnalysisDynamic TestingSupply Chain Security
Company profileWebsite

More open roles at depthfirst