Senior Software Security Engineer, Infrastructure & Identity

San Franciscofull time

Apply on Employer Site

On Site

senior

H1B: no

Depthfirst The Senior Software Security Engineer, Infrastructure & Identity at depthfirst leads infrastructure security by hardening cloud environments and strengthening identity and access management. This role builds tooling and automation to enforce secure configurations and reduce manual security work.

Responsibilities

As one of our first security engineers, you'll own the security foundations of depthfirst's infrastructure. You'll partner closely with infrastructure and product engineers to harden our cloud environment, strengthen identity and access management, and build the tooling and automation that make secure configurations the default as we scale.
You're excited about this role because you will...
Shape our infrastructure security foundations as one of our first security engineers, identifying the highest-impact risks and driving improvements from design through production.
Improve our cloud security posture across IAM, networking, and system security, building controls that make secure configurations the default.
Strengthen identity and access management across our infrastructure and product, partnering with engineering teams on authentication, authorization, human and workload identities, and secrets management.
Write and maintain production software, tooling, and automation to prevent security issues, detect configuration drift, and reduce manual security work.
Work closely with infrastructure and product engineers to review designs, address vulnerabilities, and deliver practical security improvements that scale with the business.
Help mature centralized security logging and our detection and response capabilities as the security function grows.

Qualification

A proactive mindsetFamiliarity with security

Required

Strong software engineering skills and deep understanding of security principles, best practices, and common vulnerabilities.
A proactive mindset, with the ability to identify and address security gaps or inefficiencies through automation and tooling.
A track record of delivering scalable solutions and driving impactful changes across infrastructure in real-world projects.
Expertise in the security of cloud platforms (e.g., Amazon AWS), familiarity with container security, orchestration security, and authentication/authorization.
Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences.