Product Manager

We believe that software is the foundation of modern civilization. Yet vulnerabilities threaten its integrity, security, and resilience. We are on a mission to secure the world's software.

depthfirst is building intelligence to detect and remediate critical software vulnerabilities. We are training and scaling security AI agents to discover zero-days vulnerabilities across large customer codebases and popular open source software.

Our founding team includes deep expertise in data, infrastructure, security and LLMs with technical leaders from DeepMind, Databricks, Square, and Faire. We are looking for strong technical people who are interested in working at the intersection of AI, Security, and Infrastructure.

We’re looking for a Product Manager to help define and build AI-native security products for modern engineering and security teams. This is a high-ownership role for someone with sharp product instincts, strong technical judgment, and the ability to turn ambiguous customer problems into clear product direction.

You’ll partner closely with Engineering, Research, Security, Design, Sales, and Solutions Engineering to shape product strategy and bring new capabilities from early customer signal to production. Depending on company priorities and your background, you may work on Agentic Pen-testing our Supply Chain security product suites.

• Own product areas end-to-end, from discovery through launch and iteration

• Work directly with enterprise security and engineering teams to understand workflows, pain points, and success criteria

• Translate ambiguous customer problems into crisp product bets

• Partner with Engineering and Research to build agentic systems for discovery, triage, remediation, validation, and prevention

• Build tight customer feedback loops to inform product decisions, trade-offs, and launches

• Help build products that transform enterprise security programs

• Product management experience, or equivalent experience shipping technical products

• Technical CS background through degree, software engineering work, or hands-on technical experience

• Strong technical fluency with complex systems, APIs, data flows, and agentic workflows

• Excellent product judgment and ability to prioritize durable customer problems

• Strong written and verbal communication across technical and business teams

• High agency in ambiguous, fast-changing environments

• Located in or willing to relocate to San Francisco

• Experience with application security, vulnerability management, DevSecOps, secure SDLC, SAST, SCA, software supply chain security, or cloud security products

• Background building products for security teams, developers, platform engineers, or technical enterprise buyers

• Direct work with enterprise customers, especially security leaders, AppSec teams, or engineering leaders

• Prior startup experience in a high-growth startup environment

• Competitive salary with meaningful equity

• Health, vision, and dental insurance

• Office lunch and dinner (when working from our SF office)

• High ownership and direct impact on product direction

• The opportunity to work at the cutting edge of AI and security

depthfirst is an equal opportunity employer and does not discriminate on the basis of race, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition, or any other basis protected by law.

To all recruitment agencies: depthfirst does not accept agency resumes. Please do not forward resumes to depthfirst employees. depthfirst is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the Company.