About Tolmo
Tolmo is cybersecurity for the age of AI. Coding agents now ship software faster than any human team can review or secure it; 100+ pull requests per engineer per week is no longer an outlier, and attackers are using the same agents to find and exploit weaknesses in days, not months. The old playbook of quarterly pentests and endless alert queues breaks at this speed.
We're building a new security playbook. Tolmo runs a fleet of AI security agents that reason over a live graph of your entire production system (code, CI, cloud, and telemetry) and continuously attack a faithful copy of it like a real adversary. Every finding arrives validated, with its blast radius and a remediation plan that lands in your workflow, ready for a coding agent to fix. Hours to integrate, days to your first validated finding.
We've done this before: Tolmo's founders built Sqreen (acquired by Datadog) and led security products that thousands of organizations trusted. We're backed by Accel and Y Combinator and just getting started.
The role
Security tools have a reputation: dense, noisy, and built for specialists who tolerate them. We think that's a design failure, not a law of nature. As a Software Engineer on Product, you build the surfaces where people meet our agents, and you make them feel fast, clear, and trustworthy.
You'll own Mission Control, where teams watch a fleet of agents work in real time, and the findings workflows that take a validated vulnerability from "what is this?" to "fixed" in as few steps as possible. The work is full-stack: you'll shape the API and data model as much as the pixels, because a great interface usually starts with the right data underneath it.
You'll work directly with the founders, our designer, and customers, and you'll have real say in what we build, not just how.
What you'll do
Mission Control: build the live view of agent activity, so people can see what an autonomous agent is doing, why, and how confident it is, without drowning in logs.
Findings workflows: design and ship how findings are triaged, explained, assigned, and fixed, including blast radius, evidence, and the handoff to a coding agent.
Full-stack ownership: take features from a rough idea through API design, data model, and UI to production, and follow them after launch.
Craft and polish: sweat the details that make software feel good: speed, empty states, keyboard flows, copy, and the small interactions nobody asks for but everyone notices.
Learn from customers: sit in on customer calls, watch people use the product, and turn friction into fixes within days.
Raise the bar: help shape our design system, front-end architecture, and how the team thinks about product quality.
What we're looking for
Taste. You can tell when something is off, explain why, and fix it. You have shipped products you're proud of, and you can show us.
Strong full-stack engineering skills, with deep experience in TypeScript and React and comfort working on APIs and databases.
A track record of owning product features end to end, from ambiguous problem to polished, shipped experience.
Care for UX at every level: information architecture, interaction design, performance, and accessibility.
Comfort with complex, data-heavy interfaces, and the judgment to make them simple without hiding what matters.
You build with AI coding agents daily (e.g., Claude Code, Cursor) and ship fast without letting quality slip.
Nice to have
Experience building developer tools, security, infrastructure, or observability products.
Experience designing interfaces for AI or agentic products, where trust and transparency matter.
Design skills of your own: you're comfortable in Figma, or you prototype straight in code.
Experience with real-time interfaces, graph visualization, or large data sets in the browser.
Prior early-stage startup or founding-engineer experience.
Compensation & benefits
Competitive salary, depending on level and experience.
Early-stage equity: you're joining early; you'll own a real piece of what we build.
Comprehensive medical, dental, and vision coverage, and the equipment you need to do your best work.
Based in San Francisco; we work in person.
Tolmo is building a team with wide-ranging backgrounds, perspectives, and paths into security; we think it makes our product and judgment better. If you're excited about this role but don't match every point above, we'd still like to hear from you. We're an equal opportunity employer and welcome applicants of every background.