Staff Software Engineer- Managed Scanning at Semgrep

San Francisco, California, United States

Semgrep Logo
Not SpecifiedCompensation
Junior (1 to 2 years)Experience Level
Full TimeJob Type
UnknownVisa
Software, Application SecurityIndustries

Skills

Key technologies and capabilities for this role

Backend EngineeringElasticsearchTask Processing SystemsWeb Service BackendsSoftware SecurityData StorageData RetrievalSystem Architecture

Questions & Answers

Common questions about this position

What experience level is required for this Staff Software Engineer role?

The role requires 6+ years of experience writing production software and building web applications.

What will I be working on as a backend engineer on the Managed Scanning team?

You'll build systems for scanning infrastructure, including task processing, web service backends, and architecting Elasticsearch for search and analytics in findings storage and retrieval.

Is there an on-call rotation for this position?

Yes, the role involves participation in an on-call rotation to ensure high-availability operation of services using modern site-reliability practices.

What does the company culture emphasize for this role?

Semgrep emphasizes a culture of transparency where you'll influence key decisions, mentor junior developers, and collaborate with product managers and engineers to build loved security tools.

What makes someone ideal for this Staff Software Engineer position?

Ideal candidates have 6+ years of experience, can help set technical direction, execute major initiatives end-to-end, ensure high-availability with on-call, and mentor others through code reviews and documentation.

Semgrep

Vulnerability detection tool for software development

About Semgrep

Semgrep offers a tool that helps security engineers and developers identify and fix vulnerabilities in their code before deployment. It integrates into existing workflows, providing actionable insights while significantly reducing false positives in open-source vulnerabilities by up to 98% through reachability analysis. The tool is designed for speed, with average scan times of less than 5 minutes, allowing teams to quickly address security issues. Semgrep aims to enhance the security of the software development life cycle, improving productivity and reducing technical debt.

San Francisco, CaliforniaHeadquarters
2017Year Founded
$90.5MTotal Funding
SERIES_CCompany Stage
Enterprise Software, CybersecurityIndustries
51-200Employees

Benefits

Health Insurance
Paid Vacation
401(k) Retirement Plan
Professional Development Budget
Flexible Work Hours
Remote Work Options

Risks

Increased competition from Snyk and GitGuardian in the code analysis market.
Rapid evolution of programming languages may outpace Semgrep's tool updates.
Customer concerns about data privacy in cloud-based solutions could affect adoption.

Differentiation

Semgrep reduces false positives in vulnerabilities by up to 98% with reachability analysis.
The tool integrates seamlessly into existing workflows and ticketing systems for developers.
Average scan time is under 5 minutes, enhancing productivity and efficiency.

Upsides

Increased demand for supply chain security tools boosts Semgrep's market potential.
Rise of DevSecOps practices aligns with Semgrep's focus on SDLC security integration.
Growing popularity of IaC tools presents expansion opportunities for Semgrep.

Land your dream remote job 3x faster with AI