San Francisco, CA
AI-powered code security platform for developers
Semgrep builds an extensible AppSec platform that unifies AI-assisted SAST, SCA, and secrets scanning to detect vulnerabilities in source code. It serves developers and security teams at companies like Figma, Dropbox, and Snowflake by integrating into CI/CD, IDEs, and PRs. This enables rapid secure development by reducing false positives and providing actionable fixes without workflow disruption.
Lead the platform team for Semgrep Guardian, embedding security analysis into AI agents, MCP, and IDEs. Own integration, orchestration, and distribution to deliver low-latency risk verdicts, driving adoption across products and partners. Requires 3+ years managing engineering teams and experience building durable platforms or security/developer tools.
Senior/Staff Security Researcher building scalable detection systems that combine program analysis, taint tracking, and LLMs to find and validate real vulnerabilities with minimal false positives. Requires strong appsec expertise, coding fluency in multiple languages, and experience with applied AI for security-critical automation.
Lead a 3-5 person engineering team building AI-native code security Workflows at Semgrep. Combine SDKs, orchestration, and AI/LLMs to detect, validate, and remediate security issues. Requires 3+ years engineering management experience plus expertise in two of SDK/API design, workflow orchestration, or AI for cybersecurity. Hybrid in San Francisco.
Corporate Counsel responsible for negotiating and executing commercial contracts (SaaS, MSAs, DPAs, NDAs), advising on legal issues in AI, data privacy, security, and IP, while building scalable legal processes and leveraging AI for workflow efficiency at a high-growth code security company. Requires JD, 3-6 years experience in tech/SaaS, and strong business judgment.
Lead a 7-person team owning integrated campaigns, lifecycle, web, and PLG to drive pipeline and revenue. Requires 10+ years B2B demand gen experience, strong analytics fluency, and technical audience marketing skills.
Lead the supply chain security engineering team at Semgrep. Build tools to detect reachable vulnerabilities in dependencies, set product roadmap with PM/design, mentor engineers, hire talent, and make technical contributions. Requires 3+ years leading engineering teams and experience in security or dev tooling.
As a Staff Product Designer, you will own the end-to-end experience of Semgrep's platform, working across product areas to define security tooling. You will partner with PM and engineering leads to shape roadmap direction and product strategy, focusing on intuitive and trustworthy security workflows.
Builds and optimizes growth experiments, user onboarding, and infrastructure to drive acquisition, activation, retention, and revenue for Semgrep's code security platform. Requires 4+ years in software engineering with Python, TypeScript, Postgres, and AI tools.
Designs and manages cloud-build environments for agentic development, builds infrastructure for citizen developers, and ensures AI-ready processes bridging Engineering, Security, and TechOps. Requires 5+ years in software/DevTools/infra engineering, AWS/GCP experience, Python/TypeScript.
Owns a product area end-to-end including vision, strategy, customer engagement, and cross-functional execution to drive commercial success. Requires 5+ years PM experience building software for engineers in fast-paced environments.
Leads development and execution of strategic technology partnerships, building executive and technical relationships, driving integrations, and co-marketing initiatives with developer-focused software companies. Requires 7-10 years in partnerships or business development with technical fluency.
Builds and maintains backend systems, APIs, data models, and services for scalable code security products. Requires expertise in databases, distributed systems, and vendor integrations; experience with Python/Flask backend preferred.
Builds and maintains fullstack features using React, TypeScript, Python, and Flask to deliver secure user experiences for AppSec and developers. Collaborates with design and product teams; scales systems on Kubernetes and AWS.
Build and maintain backend systems, APIs, data models, and services for scalable code security products. Requires strong knowledge of databases, distributed systems, and query optimization; experience with Python/Flask preferred.
Develops AI-powered solutions using LLMs to improve code security vulnerability detection, prioritization, and remediation. Collaborates with customers, implements end-to-end features, and evaluates models through experimentation on real-world data.
Drives implementation and adoption of Semgrep for key customers through personalized success plans, executive reviews, issue de-escalation, and product advocacy. Requires 5+ years customer-facing experience, deep knowledge of developer workflows, CI/CD tools, and AppSec concepts.