depthfirst · San Francisco ·
Product Manager at depthfirst, an AI-native security startup building intelligence to detect and remediate software vulnerabilities. The role involves defining security products for enterprise engineering and security teams, working with AI agents for vulnerability discovery and remediation, and translating ambiguous customer problems into product direction.
nord-security · Vilnius
Thomson Reuters · Canada, Toronto, Ontario
Anthropic · San Francisco, CA
Profound · San Francisco, California
We believe that software is the foundation of modern civilization. Yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to secure the world's software.
depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-days vulnerabilities across large customer codebases and popular open source software.
Our founding team includes deep expertise in data, infrastructure, security and LLMs with technical leaders from DeepMind, Databricks, Square, and Faire. We are looking for strong technical people who are interested in working at the intersection of AI, Security, and Infrastructure.
We’re looking for a Product Manager to help define and build AI-native security products for modern engineering and security teams. This is a high-ownership role for someone with sharp product instincts, strong technical judgment, and the ability to turn ambiguous customer problems into clear product direction.
You’ll partner closely with Engineering, Research, Security, Design, Sales, and Solutions Engineering to shape product strategy and bring new capabilities from early customer signal to production. Depending on company priorities and your background, you may work on Agentic Pen-testing our Supply Chain security product suites.
Own product areas end-to-end, from discovery through launch and iteration
Work directly with enterprise security and engineering teams to understand workflows, pain points, and success criteria
Translate ambiguous customer problems into crisp product bets
Partner with Engineering and Research to build agentic systems for discovery, triage, remediation, validation, and prevention
Build tight customer feedback loops to inform product decisions, trade-offs, and launches
Help build products that transform enterprise security programs
Product management experience, or equivalent experience shipping technical products
Technical CS background through degree, software engineering work, or hands-on technical experience
Strong technical fluency with complex systems, APIs, data flows, and agentic workflows
Excellent product judgment and ability to prioritize durable customer problems
Strong written and verbal communication across technical and business teams
High agency in ambiguous, fast-changing environments
Located in or willing to relocate to San Francisco
Experience with application security, vulnerability management, DevSecOps, secure SDLC, SAST, SCA, software supply chain security, or cloud security products
Background building products for security teams, developers, platform engineers, or technical enterprise buyers
Direct work with enterprise customers, especially security leaders, AppSec teams, or engineering leaders
Prior startup experience in a high-growth startup environment
Competitive salary with meaningful equity
Health, vision, and dental insurance
Office lunch and dinner (when working from our SF office)
High ownership and direct impact on product direction
The opportunity to work at the cutting edge of AI and security
depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.
To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.
UiPath · Manchester