[Remote] Senior Software Engineer- Security Workflows at Semgrep

Remote

Semgrep Logo
Not SpecifiedCompensation
Senior (5 to 8 years)Experience Level
Full TimeJob Type
UnknownVisa
Cybersecurity, Software Development ToolsIndustries

Requirements

Candidates should possess a Bachelor’s degree in Computer Science or a related field, along with a minimum of 5 years of experience as a Software Engineer. Strong experience in building integrations and working with APIs is essential, as is a solid understanding of security workflows and application security principles.

Responsibilities

As a Senior Software Engineer- Security Workflows, you will build customer-facing integrations that simplify vulnerability prioritization and remediation for application security teams. You will collaborate with product managers and other engineers to create security tools, advocate for intuitive APIs, ensure high availability of services, and mentor other engineers through code reviews and technical discussions. Additionally, you will learn about the application-security space, help users understand their security posture, and contribute to the overall direction of the product.

Skills

Application Security
API Development
Vulnerability Management
Security Integrations
Developer Workflow Tools
Security Best Practices

Semgrep

Vulnerability detection tool for software development

About Semgrep

Semgrep offers a tool that helps security engineers and developers identify and fix vulnerabilities in their code before deployment. It integrates into existing workflows, providing actionable insights while significantly reducing false positives in open-source vulnerabilities by up to 98% through reachability analysis. The tool is designed for speed, with average scan times of less than 5 minutes, allowing teams to quickly address security issues. Semgrep aims to enhance the security of the software development life cycle, improving productivity and reducing technical debt.

San Francisco, CaliforniaHeadquarters
2017Year Founded
$90.5MTotal Funding
SERIES_CCompany Stage
Enterprise Software, CybersecurityIndustries
51-200Employees

Benefits

Health Insurance
Paid Vacation
401(k) Retirement Plan
Professional Development Budget
Flexible Work Hours
Remote Work Options

Risks

Increased competition from Snyk and GitGuardian in the code analysis market.
Rapid evolution of programming languages may outpace Semgrep's tool updates.
Customer concerns about data privacy in cloud-based solutions could affect adoption.

Differentiation

Semgrep reduces false positives in vulnerabilities by up to 98% with reachability analysis.
The tool integrates seamlessly into existing workflows and ticketing systems for developers.
Average scan time is under 5 minutes, enhancing productivity and efficiency.

Upsides

Increased demand for supply chain security tools boosts Semgrep's market potential.
Rise of DevSecOps practices aligns with Semgrep's focus on SDLC security integration.
Growing popularity of IaC tools presents expansion opportunities for Semgrep.

Land your dream remote job 3x faster with AI