D

DepthFirst

Autonomous agents audit code for vulnerabilities

GTM Engineer

Full-Time
No salary listed
Mid
San Francisco, CA, USA
In Person
Sales & Account ManagementSales Operations

About the job

Requirements
  • Experience building data pipelines, integrations, internal tools, automations, or other production systems.
  • Ability to write and review code and independently build and maintain technical solutions.
  • Fluency in SQL and comfort working with APIs, schemas, data models, databases, Salesforce, Databricks, and Snowflake.
  • Ability to take an ambiguous business problem, determine what should be built, and ship a practical solution.
  • Understanding of the difference between a fast prototype and a reliable foundation that can scale with the company.
  • Ability to use AI coding agents and modern development tools without compromising quality.
  • Willingness to learn how sales, marketing, and customer-success teams operate.
  • Ability to communicate clearly with technical and nontechnical teammates.
  • Based in San Francisco or willing to relocate.
Responsibilities
  • Build integrations and data pipelines connecting Salesforce, product data, marketing platforms, sales tools, and other internal systems.
  • Design the GTM data foundation, including data models, Salesforce architecture, APIs, pipelines, and a data warehouse.
  • Automate operational workflows such as campaign ingestion, lead routing, enrichment, attribution, follow-up tracking, and CRM updates.
  • Build lightweight internal and customer-facing applications, including enablement, account-health, and product-analytics tools.
  • Replace brittle, manual workflows with maintainable and testable systems that can be extended as the business evolves.
  • Make GTM data trustworthy and accessible, giving sales, marketing, customer success, and leadership a reliable view of performance.
  • Work directly with GTM teams to identify bottlenecks, translate loosely defined needs into technical solutions, and prioritize what to build.
  • Own created systems, including their accuracy, reliability, documentation, and ongoing improvement.
Desired Qualifications
  • Experience building systems for a scaling B2B company.
  • Familiarity with Salesforce and modern GTM tools such as Clay, n8n, Gong, or similar platforms.
  • Experience combining product-usage and GTM data.
  • Experience with email deliverability.
  • Experience with data warehouses and modern analytics infrastructure.
  • Experience building applications from scratch.
  • Familiarity with security, infrastructure, or developer-tooling markets.

About the company

DepthFirst builds autonomous agents that understand a company’s code, business logic, and infrastructure end-to-end to surface security weaknesses and propose fixes that are ready to merge. The platform, called General Security Intelligence, uses AI agents to analyze an organization’s codebase and systems, identify vulnerabilities, and suggest actionable patches that can be integrated into the codebase. It stands out from traditional static analysis by delivering more true-positive findings (about 8x higher) and far fewer false positives (roughly 85% fewer), and it shows strong performance on CyberGym benchmarks. Early customers include AngelList, Supabase, Moveworks, Persona, and Lovable. The company aims to speed up secure software development by automatically finding problems and providing ready-to-implement fixes, and it is expanding research, go-to-market efforts, and hiring after a $40 million Series A round in January 2026.

Company Size

51-200

Company Stage

Series B

Total Funding

$140.8M

Headquarters

San Francisco, California

Founded

2024

Get referred to DepthFirst

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • March 31, 2026 Series B added $80 million, bringing total funding to $120 million.
  • Customers now include ClickUp, Lovable, Supabase, incident.io, Moveworks, and Persona.
  • DepthFirst disclosed 12 FFmpeg zero-days using about $1,000 compute, proving efficient research.

What critics are saying

  • Snyk, Wiz, and GitHub Security Advisory can copy package-firewall features within months.
  • Autonomous remediation mistakes on production code trigger breaches, forcing manual review and slowing sales.
  • One missed headline vulnerability destroys trust and freezes enterprise adoption after 2026.

What makes DepthFirst unique

  • DepthFirst inspects code, business logic, and infrastructure end-to-end, not isolated alerts.
  • Its Dependency Firewall blocks malicious packages before installation across Claude, Codex, and employees.
  • Open Defense Initiative plus FFmpeg, Envoy, and Kata partnerships create proprietary vulnerability data.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Vision Insurance
  • Dental Insurance
  • Meal Benefits
  • Company Equity

Growth & Insights and Company News

Headcount

6 month growth

1%

1 year growth

5%

2 year growth

5%
Business Wire
Jun 1st, 2026
depthfirst launches Dependency Firewall to block malicious open-source packages before installation

San Francisco-based depthfirst has launched Dependency Firewall, a product that reviews and blocks malicious open-source packages before they're installed across a company. The system inspects every package download, regardless of who is installing it, and returns a verdict before installation, allowing approved packages through whilst quarantining suspicious ones and blocking malicious code. The firewall addresses growing security risks as attackers exploit open-source trust by publishing packages that mimic popular libraries. Verizon reported that 48% of data breaches in its 2026 DBIR involved ransomware, with malware attacks surging recently. Dependency Firewall uses depthfirst's agentic defence platform, which previously discovered NGINX Rift, an 18-year-old vulnerability. The company has raised $120 million from investors including Meritech Capital, Accel and Forerunner Ventures.

Business Wire
May 12th, 2026
depthfirst commits $5M in credits to help open source projects find and fix zero-day vulnerabilities

depthfirst, an applied AI security lab, has launched the Open Defense Initiative, committing up to $5 million in platform credits to help open source projects discover and fix vulnerabilities. The programme targets widely deployed infrastructure software where vulnerabilities would have significant downstream impact. The company disclosed it identified 12 previously unknown memory corruption vulnerabilities in FFmpeg using approximately $1,000 in compute, compared to Anthropic's reported $10,000 spend for similar scanning. Some vulnerabilities dated back to 2009, and patches were autonomously generated by depthfirst's platform. The initiative is currently partnering with maintainers of FFmpeg, Envoy and Kata Containers, whilst proactively analysing projects including Linux, OpenSSH and PostgreSQL. depthfirst has raised $120 million from investors including Meritech Capital, Accel and Forerunner Ventures. Maintainers can apply at opendefense.dev.

Business Wire
Apr 1st, 2026
Applied AI Lab depthfirst Announces $80 Million in Series B Funding

depthfirst, an applied AI lab on a mission to secure the world’s software, today announced its $80M Series B round, led by Meritech Capital, with participati...

Forbes
Mar 31st, 2026
Depthfirst raises $120M at $580M valuation to build AI defence against AI hackers

Depthfirst, an AI cybersecurity startup, has raised $80 million at a $580 million valuation, just two months after a $40 million Series A round. The company is developing "General Security Intelligence" to autonomously detect vulnerabilities and defend against malicious AI attacks. Founded in 2024 by former Google Deepmind researcher Andrea Michi, former Databricks security head Qasim Mithani, and ex-Block cybersecurity chief Daniele Perito, Depthfirst builds AI models from scratch using reinforcement learning rather than adapting existing large language models. The company has over 20 customers and claims 300% revenue growth over the past two quarters. Depthfirst is launching its first in-house model this week, targeting security weaknesses in cryptocurrency smart contracts. Meritech Capital led the Series B round, with total funding now exceeding $120 million.

Startup Weekly
Jan 16th, 2026
depthfirst raises $40M Series A to secure software with AI-powered threat detection

depthfirst, an applied AI lab focused on software security, has raised $40 million in a Series A round led by Accel. Alt Capital, BoxGroup, Liquid 2 Ventures, Mantis VC and SV Angel participated, alongside angel investors including Jeff Dean and Kirsten Green. Founded in 2024, depthfirst has developed a General Security Intelligence platform that detects, triages and remediates vulnerabilities across software and infrastructure. The company's AI agents uncover eight times more true-positive vulnerabilities than traditional static analysis tools whilst reducing false positives by 85 per cent. The founding team includes technical leaders from Google DeepMind, Databricks and Faire. The funding will support research and development, go-to-market efforts and hiring across applied research, engineering, product and sales.