depthfirst jobs, judged for you, free

What they do

depthfirst makes AI security software for security and engineering teams. Its agents find vulnerabilities in code, test them against the running application, and write fixes as pull requests. A Dependency Firewall blocks malicious packages. depthfirst calls itself an applied AI lab and trains its own security models. It started in 2024.

What they value

• Be kind and candid.
• Find a way through.
• Bias to action.
• Raise the bar.
• Secure customer love.

Where they hire

All 19 open roles are in San Francisco, and all are on site. Ten postings ask candidates to live in San Francisco or be willing to move there. The two customer deployment roles also travel to customer sites. The postings say nothing about visas or sponsorship.

Teams and roles

The board lists 19 roles in five departments. Engineering has seven and Sales has six.

• Applied Research: a research engineer who builds agent pipelines, evaluation benchmarks, and reinforcement learning environments to train security coding agents. A security researcher finds new vulnerabilities and reduces false positives with automated exploits.
• Engineering: a backend engineer who builds the infrastructure for the agents, such as code execution at scale and agent orchestration. A product engineer builds the front end of the web app. The stack is TypeScript, Python, Temporal, React, Next.js, Postgres, Redis, and AWS.
• Customer deployment: a forward-deployed security engineer and a security product engineer. They put the agents into customer environments and build custom integrations.
• Internal security: two senior engineers who are among the first security engineers at depthfirst. One owns corporate security, with Okta, device management, and endpoint detection. One owns cloud infrastructure and identity.
• Product: a product manager and a designer who works on product, brand, or both.
• Sales: an account executive, a sales development representative, a solutions engineer, and a GTM engineer in Engineering who builds the sales data systems. The technical account manager, the product marketing lead, and the analytics and GTM operations lead are each the first in their job.
• General and administrative: a recruiter and a recruiting coordinator.

What they look for

Six engineering and research postings ask for three or more years of experience. Python appears in most of them. The backend, research engineer, and security researcher postings accept a computer science degree or equal industry experience. The account executive, technical account manager, and product marketing roles ask for five or more years, and the solutions engineer asks for four. The sales development role takes a background in cybersecurity or one year of outbound sales.

Security experience is a requirement or a plus in most roles. Customer roles want application security, vulnerability management, or CI/CD knowledge. Many postings ask for high ownership and comfort with ambiguity. Several ask for real interest in AI and security. The GTM engineer must use AI coding agents.

Every posting offers a competitive salary with meaningful equity, and none gives a pay range. The postings do not describe the interview steps.