# Member of the Technical Staff, Security Engineer at Tolmo

- Company: Tolmo
- What the company does: Autonomous security agents on a live knowledge graph of your code, cloud, and vendors. Tolmo finds vulnerabilities, misconfigurations, and threats, then ships the fix. Backed by Accel and Y Combinator.
- Company website: https://tolmo.com/
- Type: Startups (AI role)
- Level: Senior
- Location: San Francisco
- Work setup: Remote
- Posted: 2026-11-02
- Apply by: 2026-12-17
- Apply: https://jobs.ashbyhq.com/tolmo/026f41ba-9175-4d58-8b4d-c01f0804ddbd?utm_source=1752vc&utm_medium=careers
- Page: https://www.1752.vc/careers/jobs/tolmo-member-of-the-technical-staff-security-engineer/

## About the role

As a Research Engineer on Offensive Security, you make our agents attack like the best human red teamers, and then better. You'll research how real systems get broken, turn that knowledge into techniques, tools, and evaluations our agents can use, and prove it against real customer environments. Found on 1752vc Careers, the job board for startup and VC roles.

## What they're looking for

- Deep hands-on offensive security experience: penetration testing, red teaming, exploit development, or vulnerability research
- A track record that shows it: CVEs, bug bounty results, CTF wins, published research, or talks
- Strong engineering skills: you write production-quality code (Go, TypeScript, or Python) and build tools other people rely on, not just one-off scripts
- Solid understanding of modern application and cloud architectures and how they fail: auth, access control, SSRF, injection, misconfigured IAM, exposed secrets, supply chain
- You build with AI coding agents daily (e.g., Claude Code, Cursor) and are curious about how far autonomous agents can take offensive work
- Sound judgment about safety and scope: you know how to test production-like systems without causing harm

Tags: Engineering

Source: 1752vc Careers, https://www.1752.vc/careers/jobs/tolmo-member-of-the-technical-staff-security-engineer/