Engineering
ABOUT TOLMO
Tolmo is cybersecurity for the age of AI. Coding agents now ship software faster than any human team can review or secure it; 100+ pull requests per engineer per week is no longer an outlier, and attackers are using the same agents to find and exploit weaknesses in days, not months. The old playbook of quarterly pentests and endless alert queues breaks at this speed.
We're building a new security playbook. Tolmo runs a fleet of AI security agents that reason over a live graph of your entire production system (code, CI, cloud, and telemetry) and continuously attack a faithful copy of it like a real adversary. Every finding arrives validated, with its blast radius and a remediation plan that lands in your workflow, ready for a coding agent to fix. Hours to integrate, days to your first validated finding.
We've done this before: Tolmo's founders built Sqreen (acquired by Datadog) and led security products that thousands of organizations trusted. We're backed by Accel and Y Combinator and just getting started.
THE ROLE
As a Member of the Technical Staff, you build the system that makes our agents good at security: the graph they reason over, the infrastructure they run on, and the agents themselves. There are no fixed lanes. In one week you might ship a new cloud integration, rework how the graph links an endpoint to the code that serves it, and tune an offensive agent so it chains two low-severity findings into a real exploit.
You'll work directly with the founders and a small team of engineers who ship to production every day, and who use coding agents as he