Semgrep is looking to improve its release and CI processes by automating manual tasks, maturing build processes, and enhancing tests to scale to enterprise customers and improve observability and scanning reliability.
Requirements
- Experience working in Python and interest in learning a functional programming language (OCaml)
- Improve our Opentelemetry-based observability tooling to reduce the time taken to identify the root cause of bugs found when analyzing customers’ code
- In partnership with our Managed Scanning team, propose and lead the implementation of a release process that reduces release cycles from weekly to daily or continuously for most users
- Implement OAuth for authentication for our MCP server
- Optimize how Semgrep infers the relationships between functions to speed up dataflow analysis
- Build a robust performance testing platform that allows every change to be confidently verified for performance regressions
Responsibilities
- Ensure that our changes are released frequently and reliably through a number of distribution methods, including pip, homebrew, and docker
- Build tooling that allows us to support our users more effectively when they encounter problems
- Advocate for architectural decisions that make our code easy to reason about and allow us to scale with an exponentially growing number of users
- Help set the technical roadmap for our foundational analysis, listening to our users as well as program analysis engineers and security researchers across the company
- Advise and mentor other engineers via thoughtful code reviews, planning discussions, technical documentation, and formal mentorship
- Improve our Opentelemetry-based observability tooling to reduce the time taken to identify the root cause of bugs found when analyzing customers’ code
- In partnership with our Managed Scanning team, propose and lead the implementation of a release process that reduces release cycles from weekly to daily or continuously for most users
Other
- 4+ years experience in infrastructure, devops, platform engineering, or a similar field
- Interest in code analysis. If you’ve ever spent time studying how your interpreter, compiler, linter, or garbage collector works, come work with us!
- Excellent and proactive communication, both verbal and written
- Our compensation package includes equity and benefits in addition to salary.
- Please note that the range listed is for someone based in the San Francisco Bay Area.
