Senior Software Engineer, Infrastructure at Semgrep

San Francisco, California, United States

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years)Experience Level

Full TimeJob Type

UnknownVisa

Technology, CybersecurityIndustries

Requirements

4+ years of experience developing and operating production software
Experienced in Kubernetes clusters and in AWS infrastructure
Experienced with infrastructure tools, patterns, and methodologies
Passionate about building reliable and secure infrastructure
Know to work iteratively, fail fast, manage risk, and effectively respond to incidents
Experience leading complex initiatives, working across teams, and building new organizational capabilities
A thoughtful mentor and lifelong learner

Responsibilities

Work with the team to manage, maintain, develop, and optimize cloud infrastructure
Lead major initiatives end-to-end from architecture through implementation and maintenance
Help set technical and product direction, collaborating with the team to determine the future of the internal platform, what features to build, and how to build them
Learn from internal users to understand their needs, build solutions that solve their biggest pain points
Build simple, maintainable, and extensible software systems, platforms, and internal tools
Ensure continual, high-availability operation of services using modern site-reliability practices, including participation in an on-call rotation
Advise and mentor other engineers via thoughtful code reviews, pair programming, planning discussions, technical documentation, and formal mentorship

Skills

Key technologies and capabilities for this role

KubernetesAWSCI/CDCloud InfrastructureInfrastructure as CodeDevOpsScalable Systems

Questions & Answers

Common questions about this position

What is the salary range for this Senior Software Engineer role?

The salary range is $176,000-$207,000.

Is this position remote or does it require office work?

This information is not specified in the job description.

What skills and experience are required for this role?

Candidates need 4+ years of experience developing and operating production software, experience with Kubernetes clusters and AWS infrastructure, and expertise in infrastructure tools, patterns, and methodologies.

What is the team structure and culture like at Semgrep?

The Infrastructure team manages cloud infrastructure for Semgrep’s applications, provides a platform from code to cloud including CI/CD and Kubernetes on AWS, and focuses on enabling effective building, running, and managing of systems.

What makes a strong candidate for this position?

Ideal candidates have experience leading complex initiatives across teams, are thoughtful mentors and lifelong learners, and excel at building reliable, secure infrastructure while working iteratively and responding effectively to incidents.

Semgrep

Vulnerability detection tool for software development

About Semgrep

Semgrep offers a tool that helps security engineers and developers identify and fix vulnerabilities in their code before deployment. It integrates into existing workflows, providing actionable insights while significantly reducing false positives in open-source vulnerabilities by up to 98% through reachability analysis. The tool is designed for speed, with average scan times of less than 5 minutes, allowing teams to quickly address security issues. Semgrep aims to enhance the security of the software development life cycle, improving productivity and reducing technical debt.

San Francisco, CaliforniaHeadquarters

2017Year Founded

$90.5MTotal Funding

SERIES_CCompany Stage

Enterprise Software, CybersecurityIndustries

51-200Employees

Benefits

Health Insurance

Paid Vacation

401(k) Retirement Plan

Professional Development Budget

Flexible Work Hours

Remote Work Options

Risks

Increased competition from Snyk and GitGuardian in the code analysis market.

Rapid evolution of programming languages may outpace Semgrep's tool updates.

Customer concerns about data privacy in cloud-based solutions could affect adoption.

Differentiation

Semgrep reduces false positives in vulnerabilities by up to 98% with reachability analysis.

The tool integrates seamlessly into existing workflows and ticketing systems for developers.

Average scan time is under 5 minutes, enhancing productivity and efficiency.

Upsides

Increased demand for supply chain security tools boosts Semgrep's market potential.

Rise of DevSecOps practices aligns with Semgrep's focus on SDLC security integration.

Growing popularity of IaC tools presents expansion opportunities for Semgrep.

Land your dream remote job 3x faster with AI

Try Jobo Free