Tolmo
Direct Ashby career site

Member of the Technical Staff, Software Engineering

Location
San Francisco, CA (Remote)
Listed
2 days ago

The Role

As a Member of the Technical Staff, you build the system that makes our agents good at security: the graph they reason over, the infrastructure they run on, and the agents themselves. There are no fixed lanes. In one week you might ship a new cloud integration, rework how the graph links an endpoint to the code that serves it, and tune an offensive agent so it chains two low-severity findings into a real exploit.

You'll work directly with the founders and a small team of engineers who ship to production every day, and who use coding agents as heavily as the customers we protect. You'll own problems end to end: talk to the customer, design the fix, ship it, and watch it run in production.

What You'll Do

  • Build and extend the live security graph: crawlers that discover cloud, SaaS, and code resources, and the pipeline that turns them into a consistent model of a customer's production system.
  • Design, evaluate, and improve AI security agents that pentest, triage, chain, and remediate findings, and build the evals that tell us whether they actually got better.
  • Own services end to end across Go, TypeScript, PostgreSQL, graph databases, and AWS, from design through deployment and on-call.
  • Make the platform safe to point at production: strict tenant isolation, egress controls, and secrets handling that customers' security teams will scrutinize.
  • Work with customers and our security leads to turn real findings, misses, and false positives into product improvements.
  • Set the engineering bar as we grow: code quality, review culture, tooling, and how we build with AI agents.

What We're Looking for

  • Strong software engineering fundamentals and a track record of shipping and owning production systems end to end.
  • Fluency in at least one of Go or TypeScript, and the willingness to work across the stack.
  • Experience with distributed systems, data pipelines, or cloud infrastructure (AWS, GCP, or Azure).
  • You build with AI coding agents daily (e.g., Claude Code, Cursor) and have opinions about how to make them reliable.
  • Curiosity about how real systems break: you want to understand the attack, not just the alert.
  • You own ambiguity: energized by defining how something works, not just executing a process.

Nice to Have

  • Offensive security experience: penetration testing, red teaming, bug bounty, or CTFs.
  • Experience building LLM agents, evals, or agent tooling in production.
  • Experience with graph data models or graph databases (Neptune, Neo4j, Memgraph).
  • Background in application or cloud security tooling (SAST, DAST, CSPM, SIEM).
  • Prior early-stage startup or founding-engineer experience.

Compensation & Benefits

  • Base salary: [PAY RANGE], depending on level and experience.
  • Early-stage equity: you're joining early; you'll own a real piece of what we build.
  • Comprehensive medical, dental, and vision coverage, and the equipment you need to do your best work.
  • Based in San Francisco; we work in person.

About Tolmo

Tolmo is cybersecurity for the age of AI. Coding agents now ship software faster than any human team can review or secure it; 100+ pull requests per engineer per week is no longer an outlier, and attackers are using the same agents to find and exploit weaknesses in days, not months. The old playbook of quarterly pentests and endless alert queues breaks at this speed.

We're building a new security playbook. Tolmo runs a fleet of AI security agents that reason over a live graph of your entire production system (code, CI, cloud, and telemetry) and continuously attack a faithful copy of it like a real adversary. Every finding arrives validated, with its blast radius and a remediation plan that lands in your workflow, ready for a coding agent to fix. Hours to integrate, days to your first validated finding.

We've done this before: Tolmo's founders built Sqreen (acquired by Datadog) and led security products that thousands of organizations trusted. We're backed by Accel and Y Combinator and just getting started.

Read the original posting

From Tolmo's careers page, first listed on Rolev.ai on November 7, 2026. Rolev.ai is not the employer.

How Rolev.ai helps with this application

Rolev.ai is a job search and application tool for US job seekers. For this Member of the Technical Staff, Software Engineering role at Tolmo, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.

  • See how you fit

    Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.

  • Tailor without inventing

    Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.

  • Draft the full kit

    Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.

  • 1-Click Extension Autofill

    The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.

Common questions

Where is the Member of the Technical Staff, Software Engineering job at Tolmo located?

Yes, this Member of the Technical Staff, Software Engineering opening at Tolmo is listed as San Francisco, CA (Remote). Always check Tolmo's application page for specific state eligibility or relocation policies.

How do I apply for the Member of the Technical Staff, Software Engineering position at Tolmo?

This listing links directly to Tolmo's Ashby application page. You can apply directly on Tolmo's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Ashby application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.