Base Salary
$163k - $247k/yr
Responsibilities
- Develop AI-powered solutions throughout Semgrep’s software stack.
- Improve security vulnerability detection, prioritization, and remediation capabilities.
- Prototype and ship solutions rapidly across frontend and backend systems.
- Experiment with prompts and models and evaluate their efficacy using real-world data.
- Partner directly with customers to understand and address their needs.
Requirements
- Apply LLM technologies to improve security vulnerability detection, prioritization, and remediation.
- Work directly with customers to understand pain points and translate them into AI-powered solutions.
- Own end-to-end implementation and rigorously evaluate prompts and models using real-world data.
- Comfort working with significant ambiguity and prototyping and shipping quickly.
- Professional experience with GPT-4, GPT-5, Codex, Claude, TypeScript, React, Python, Flask, SQLAlchemy, Kubernetes, and AWS is preferred but not required.
- Willingness to learn unfamiliar technologies quickly.
Benefits
- Competitive benefits program varying by location.
- Equity may be included as part of total compensation.
- Hybrid work with at least three days per week in the San Francisco, New York, Boston, or Denver offices; remote work may be considered for exceptional candidates.
- Eligible for full-time employee benefits.
Tech Stack
Categories
About Semgrep
Semgrep is the leader in code security for builders. Teams catch, flag, and fix real issues before they ship, powered by security that learns as you build. Built for builders and trusted by security, the platform unifies SAST, SCA, and secrets scanning, embedding protection directly into the development workflow so security begins where code is written and lives where developers work. Semgrep combines deterministic static analysis with AI reasoning to power detection, triage, and remediation. This approach helps teams uncover real vulnerabilities, prioritize reachable risks, and fix issues faster. Customers report up to 80% fewer false positives across Code and Supply Chain, with 95% of findings validated by security reviewers across more than 6 million results. Founded in San Francisco, Semgrep is backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital. It is recognized by Gartner in Application Security Testing and trusted by leading organizations, including Snowflake, Dropbox, and Figma. Learn more at semgrep.dev.