Semgrep is looking to solve the problem of expensive software exploitation by improving their SAST platform. The Security Research Coverage team will drive the coverage through rules for Secrets, Code, and Supply Chain across all Semgrep products, aiming to enable organizations to ship secure code quickly without slowing down development.
Requirements
- Comfortable writing code, especially in Python or Rust
- 5+ years experience as a Tech Lead in the Security space: App Sec Engineer, Security Researcher, Vulnerability Researcher, etc
- Curiosity and a love of new technologies, especially AI/ML
Responsibilities
- Writing high-quality detection rules
- Advancing research and automation to make rule writing faster and more accurate
- Measuring and improving the overall quality and coverage of detections
- Improve and scale Semgrep’s automated pipelines for generating and validating high-confidence detection rules
- Lead a team to identify and analyze vulnerability patterns (CVEs or from first-principle) across languages and ecosystems, and turn those into detection rules.
- Put in place unified measurements for performance of detection to ensure the best quality across our customers
- Contribute to the technical direction and to the research (depending on your profile)
Other
- 2+ years experience as a People Manager
- Hire, develop, and grow the team, cultivating a productive, engaging, diverse, and inclusive work environment that aligns with Semgrep's core values
- Work closely with product management, sales, and product development teams across all product lines
- Understand, measure, and elevate the velocity and quality of Semgrep detection rule delivery
- Prioritize your team’s work and schedules, balancing current product needs with strategic research that will help scale the team through AI and automation
