Product Designer

Tolmo builds AI security agents that run across a company's production stack. Our agents work from a live knowledge graph of code, cloud, CI, observability and security tools: a Pentesting Agent that continuously tests live environments and proves real exploitability, an Internal Discovery Agent that maps assets and dependencies, and a Remediation Agent that turns findings into verified fixes and reviews changes at pull-request time. Setup is read-only and takes minutes.

Attackers weaponize new vulnerabilities in about a day and a half; most security teams take two weeks to respond. We exist to close that gap for teams shipping AI-generated code at speed.

You will own product design at Tolmo end to end, from the first sketch of a new workflow to the pixel-level polish of what ships. Security products are usually dense, noisy and built for specialists. Ours has to make a pentest finding, its blast radius and its fix legible to an engineer in seconds, and make an autonomous agent feel trustworthy rather than opaque. That is a hard, open design problem, and you will set the direction for it.

You will work directly with the founders, the product manager and the engineering team, and you will talk to customers every week. There is no design system, no research practice and no design process yet; you will build those as you go, and hire the people who come after you.

• Design the core product experience: how findings, the knowledge graph, agent activity and remediation are surfaced to security and engineering teams.

• Take features from problem definition through research, flows, prototypes and final UI, and stay close to engineering until they ship.

• Run customer conversations and usability sessions, and turn what you learn into decisions the whole team can act on.

• Build and maintain Tolmo's design system and component library, in partnership with front-end engineers.

• Shape how the product communicates what an autonomous agent is doing, why, and how confident it is.

• Contribute to marketing site, onboarding and sales material when the product story needs it.

• Set the bar for craft and establish the design practice we hire into next.

• 5+ years designing software products, with at least one stretch as the sole or lead designer on a B2B or developer-facing product.

• A portfolio of shipped work that shows you can make dense, data-heavy interfaces clear and fast to use.

• Fluency across the whole process: discovery, information architecture, interaction design, visual design and prototyping, in Figma or equivalent.

• Comfort with ambiguity and speed. You would rather ship, learn and revise than wait for a complete spec.

• Enough technical fluency to work closely with engineers on code, cloud and CI concepts; you do not need to be a security expert, but you need to be curious about it.

• Clear writing and a habit of explaining the reasoning behind your decisions.

• Based in, or willing to relocate to, San Francisco. This role is in person.

Nice to have: experience designing security, infrastructure or observability tools; experience with agentic or AI-driven products; the ability to prototype in code; prior experience as a first design hire.

Tolmo is an equal opportunity employer. We make hiring decisions on the basis of qualifications and merit, and we do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other characteristic protected by law.