Tolmo is cybersecurity for the age of AI. Coding agents now ship software faster than any human team can review or secure it; 100+ pull requests per engineer per week is no longer an outlier, and attackers are using the same agents to find and exploit weaknesses in days, not months. The old playbook of quarterly pentests and endless alert queues breaks at this speed.
We're building a new security playbook. Tolmo runs a fleet of AI security agents that reason over a live graph of your entire production system (code, CI, cloud, and telemetry) and continuously attack a faithful copy of it like a real adversary. Every finding arrives validated, with its blast radius and a remediation plan that lands in your workflow, ready for a coding agent to fix. Hours to integrate, days to your first validated finding.
We've done this before: Tolmo's founders built Sqreen (acquired by Datadog) and led security products that thousands of organizations trusted. We're backed by Accel and Y Combinator and just getting started.
The roleAs our first Solutions Engineer, you're the technical heart of every customer conversation: you prove, hands-on, that Tolmo does what we say. You'll partner with founders and sales to turn skeptical security and engineering leaders into believers, and feed what you learn in the field directly back into the product.
This is an early, high-ownership seat. You won't inherit a polished playbook; you'll help write it. Expect a typical day to span summarizing security findings for a proof-of-value in a customer's cloud, walking a security engineer through blast-radius evidence, scripting a CISO-level demo against our production graph, and filing the feature gap that wins our next deals. You'll work across our market: digital-native enterprises with sprawling estates and AI-native companies shipping at agent speed.
What you'll doRun technical discovery that surfaces a customer's real exposure: how fast they ship, where review breaks, and what a breach would cost them.
Design and deliver tailored demos that show how Tolmo reasons over their production graph and surfaces risk & remediation plans their current processes struggle with.
Own proofs-of-value end to end: qualify pains, define success criteria, and drive to first validated findings and a confident technical win.
Be the trusted technical advisor across the buying group, translating deep detail for security engineers, VP Engineering, and the CISO or CIO alike.
Author clear, persuasive responses to security questionnaires and RFPs, covering data handling, deployment model, and pentest evidence.
Coordinate with Tolmo security leads to schedule & deliver agent-assisted pentesting campaigns for proofs-of-value and customers.
Close the loop with product and engineering, carrying field signal back to shape what we build next.
Build the proof-of-value playbooks and reusable assets that make every AE and future SE faster.
You own technical conversations end to end with customers: running discovery, delivering a tailored demo, and driving a proof-of-value to a technical win.
You translate deep technical detail into clear business value for engineers and executives alike.
You're hands-on: comfortable across cloud (AWS, GCP, or Azure), CI/CD, code, and the terminal, and you pick up unfamiliar stacks quickly.
You build with AI coding agents daily (e.g., Claude Code, Cursor) to prototype demos, integrations, and proof-of-value environments fast.
You think like an attacker: you understand how real systems break and chain together, not just how they're built.
You own ambiguity: energized by defining how something works, not just executing a process.
Hands-on offensive security: penetration testing, red teaming, or bug bounty work. Certifications like OSCP, OSEP, or CRTO are a strong signal; Security+, CISSP, or CEH are welcome too. None are required.
Experience selling to or working alongside security and engineering teams at enterprises or AI-native companies.
Familiarity with application and cloud security tooling (SAST, SCA, DAST, SIEM) and compliance frameworks (SOC 2, PCI, ISO 27001).
Prior startup, forward-deployed, or solutions-architecture experience.
Experience building a solutions engineering or solutions architecture org from the ground up.
On-target earnings: 170,000–280,000, depending on level and experience (roughly 70% base / 30% variable).
Early-stage equity: you're joining early; you'll own a real piece of what we build.
Comprehensive medical, dental, and vision coverage, and the equipment you need to do your best work.
Based in San Francisco; we work in person where we can. We consider exceptional remote candidates who work primarily Pacific hours and travel for customers and team.
Tolmo is building a team with wide-ranging backgrounds, perspectives, and paths into security; we think it makes our product and judgment better. If you're excited about this role but don't match every point above, we'd still like to hear from you. We're an equal opportunity employer and welcome applicants of every background.
Skills Required
- Own technical customer conversations from discovery through tailored demos and proof-of-value delivery
- Translate complex technical details into clear business value for engineers and executives
- Hands-on experience with cloud platforms such as AWS, GCP, or Azure
- Comfort working with CI/CD, code, and terminal-based environments
- Ability to use AI coding agents such as Claude Code or Cursor to build prototypes, integrations, and proof-of-value environments
- Understanding of how real-world systems break and how vulnerabilities can be chained
- Ability to operate independently and define processes in ambiguous, early-stage environments
- Hands-on offensive security experience, such as penetration testing, red teaming, or bug bounty work
- OSCP, OSEP, or CRTO certification
- Security+, CISSP, or CEH certification
- Experience working with enterprise or AI-native security and engineering teams
- Familiarity with application and cloud security tools including SAST, SCA, DAST, and SIEM
- Familiarity with SOC 2, PCI, or ISO 27001 compliance frameworks
- Prior startup, forward-deployed, or solutions-architecture experience
- Experience building a solutions engineering or solutions architecture organization
What We Do
Tolmo is an agent-native AI security platform for production software environments. It deploys fleets of security agents across the stack to continuously identify, triage, and remediate vulnerabilities and threats. The platform builds a Production Knowledge Graph by linking code, deployments, environments, telemetry, and third-party systems, then uses that context to work across pull requests, deployments, and alerts. Its initial offering includes pentesting agents for customers.







