The posting
About Tolmo
Tolmo is cybersecurity for the age of AI. Coding agents now ship software faster than any human team can review or secure it; 100+ pull requests per engineer per week is no longer an outlier, and attackers are using the same agents to find and exploit weaknesses in days, not months. The old playbook of quarterly pentests and endless alert queues breaks at this speed.
We're building a new security playbook. Tolmo runs a fleet of AI security agents that reason over a live graph of your entire production system (code, CI, cloud, and telemetry) and continuously attack a faithful copy of it like a real adversary. Every finding arrives validated, with its blast radius and a remediation plan that lands in your workflow, ready for a coding agent to fix. Hours to integrate, days to your first validated finding.
We've done this before: Tolmo's founders built Sqreen (acquired by Datadog) and led security products that thousands of organizations trusted. We're backed by Accel and Y Combinator and just getting started.
The role
As our first Solutions Engineer, you're the technical heart of every customer conversation: you prove, hands-on, that Tolmo does what we say. You'll partner with founders and sales to turn skeptical security and engineering leaders into believers, and feed what you learn in the field directly back into the product.
This is an early, high-ownership seat. You won't inherit a polished playbook; you'll help write it. Expect a typical day to span summarizing security findings for a proof-of-value in a customer's cloud, walking a security engineer through blast-radius evidence, scripting a CISO-level demo against our production graph, and filing the feature gap that wins our next deals. You'll work across our market: digital-native enterprises with sprawling estates and AI-native companies shipping at agent speed.
What you'll do
- Run technical discovery that surfaces a customer's real exposure: how fast they ship, where review breaks, and what a breach would cost them.
- Design and deliver tailored demos that show how Tolmo reasons over their production graph and surfaces risk & remediation plans their current processes struggle with.
- Own proofs-of-value end to end: qualify pains, define success criteria, and drive to first validated findings and a confident technical win.
- Be the trusted technical advisor across the buying group, translating deep detail for security engineers, VP Engineering, and the CISO or CIO alike.
- Author clear, persuasive responses to security questionnaires and RFPs, covering data handling, deployment model, and pentest evidence.
- Coordinate with Tolmo security leads to schedule & deliver agent-assisted pentesting campaigns for proofs-of-value and customers.
- Close the loop with product and engineering, carrying field signal back to shape what we build next.
- Build the proof-of-value playbooks and reusable assets that make every AE and future SE faster.
What we're looking for
- You own technical conversations end to end with customers: running discovery, delivering a tailored demo, and driving a proof-of-value to a technical win.
- You translate deep technical detail into clear business value for engineers and executives alike.
- You're hands-on: comfortable across cloud (AWS, GCP, or Azure), CI/CD, code, and the terminal, and you pick up unfamiliar stacks quickly.
- You build with AI coding agents daily (e.g., Claude Code, Cursor) to prototype demos, integrations, and proof-of-value environments fast.
- You think like an attacker: you understand how real systems break and chain together, not just how they're built.
- You own ambiguity: energized by defining how something works, not just executing a process.
Nice to have
- Hands-on offensive security: penetration testing, red teaming, or bug bounty work. Certifications like OSCP, OSEP, or CRTO are a strong signal; Security+, CISSP, or CEH are welcome too. None are required.
- Experience selling to or working alongside security and engineering teams at enterprises or AI-native companies.
- Familiarity with application and cloud security tooling (SAST, SCA, DAST, SIEM) and compliance frameworks (SOC 2, PCI, ISO 27001).
- Prior startup, forward-deployed, or solutions-architecture experience.
- Experience building a solutions engineering or solutions architecture org from the ground up.
Compensation & benefits
- On-target earnings: 170,000–280,000, depending on level and experience (roughly 70% base / 30% variable).
- Early-stage equity: you're joining early; you'll own a real piece of what we build.
- Comprehensive medical, dental, and vision coverage, and the equipment you need to do your best work.
- Based in San Francisco; we work in person where we can. We consider exceptional remote candidates who work primarily Pacific hours and travel for customers and team.
Tolmo is building a team with wide-ranging backgrounds, perspectives, and paths into security; we think it makes our product and judgment better. If you're excited about this role but don't match every point above, we'd still like to hear from you. We're an equal opportunity employer and welcome applicants of every background.
