Semgrep

Security Engineer

• Build detection at scale. Design and ship security workflows that combine deterministic analysis (taint, reachability, static slicing) with LLM reasoning to find real vulnerabilities (SSRF, IDOR, injection, auth gaps, supply-chain risk, and beyond) across many languages and frameworks.
• Make LLMs viable for security-critical work. Engineer agentic pipelines and prompts that are precise, cost-aware, and trustworthy: atomic, well-scoped steps grounded in deterministic context, with attention to hallucination, confidence calibration, and which models see sensitive code.
• Push on hard problems in automated triage and validation. Help close the gap between 'a finding exists' and 'this finding is real and worth a developer’s time,' so we can run workflows broadly and validate results at scale rather than by weeks of manual review.
• Build and defend quality with evals. Design benchmarks and evaluation loops grounded in real customer codebases, not just synthetic datasets, so we actually know when a workflow is good.
• Encode security judgment into tooling. Model vulnerability classes, taint sources/sinks/sanitizers, and security properties as reusable, versioned logic that scales across ecosystems.
• Learn new territory fast. Dive into unfamiliar languages, frameworks, and technologies, figure out how vulnerabilities manifest there, and turn that understanding into detection.
• Prototype new products. Partner with Engineering and Product to conceive, prototype, and validate new capabilities, writing real (if not always production-grade) code, with a strong sense for the customer and the user.
• Share your work. Publish blog posts, give talks, produce cheat sheets and workshops, and represent Semgrep’s research to the wider community.
• Lead and plan research with impact. Set the direction for research based on industry trends, emerging threats, and where the field is heading, and turn that into work that moves our products and the broader security community forward.

Senior/Staff Security Researcher

General Counsel

• Lead negotiation and execution of customer and vendor agreements, including SaaS agreements, MSAs, DPAs, NDAs, procurement agreements, and related commercial contracts.
• Serve as a practical, solutions-oriented advisor to internal stakeholders, balancing legal risk with business priorities.
• Help define how commercial legal operates at Semgrep, including contracting workflows, templates, playbooks, and approval processes.
• Evaluate and implement practical uses of AI within legal workflows, including contract review, playbook development, knowledge management, and process automation.
• Advise internal teams on legal issues related to SaaS, data privacy, data security, AI, and intellectual property.
• Support Product, Security, and Engineering teams on customer-facing legal and compliance considerations.
• Stay current on evolving legal and regulatory developments affecting AI, developer tools, cybersecurity, and open-source software.
• Build strong cross-functional relationships and become a trusted advisor across the organization.
• Bring a generalist mindset and the ability to flex across legal disciplines as needed.

Corporate Counsel

Chief Marketing Officer

• Lead and develop a cross-functional team of 7 spanning campaign management, lifecycle/email, web, and PLG growth marketing
• Drive integrated campaign strategy across paid, owned, and earned channels
• Own full-funnel performance tracking: channel-level cost-per metrics, funnel conversion rates
• Partner closely with Brand, Security Advocacy/Content, Marketing Ops, Data Analytics, and Sales leadership

Head of Growth – Integrated Marketing

Data Scientist

• Contribute to specific data science projects and initiatives at Semgrep; discovering each department’s most pressing data problems, and proactively identifying the most critical areas to focus your efforts
• Bring your wide knowledge of data-science approaches to each problem you solve: the first day you might build a dashboard to track Board level metrics for the Engineering team, the second you might apply multivariate regression to identify important product features, the third you might apply active-learning techniques to guide data collection and labeling
• Iteratively tackle problems as a series of experiments, proving the value of your work with proof-of-concept to ever more refined results
• Convince your peers of your conclusions with clear data visualizations and well-reasoned explanation
• Help grow your team through the recruitment and hiring of top data talent

Senior Data Scientist

Product Designer

• Own ambiguous cross-cutting design initiatives end-to-end, from problem framing and research through shipped outcomes.
• Partner closely with PM and engineering leads to shape roadmap direction and product strategy grounded in real user needs and behaviors.
• Design whole systems. You’ll make complex security workflows feel simple and trustworthy.
• Conduct and champion user research and share the knowledge you gain about users and their workflows. You’re comfortable with both qualitative and quantitative signals like task success and time on task.
• Raise the quality bar through strong craft, clear thinking, thoughtful critique, and high standards for execution.
• Build guidance and tools that enable non-designers to make better design decisions.
• Help shape how design scales at Semgrep as the team and product grow.
• Use AI tools as a core part of how you design and build when they meaningfully improve speed or quality.

Senior/Staff Security Researcher

Corporate Counsel

Head of Growth – Integrated Marketing

Senior Data Scientist

Staff Product Designer