Semgrep jobs

Staff Backend Software Engineer San Francisco Office, San Francisco, United States, Boston Office, Denver Office, New York Office About Semgrep Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it's written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog. Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Vanta, Lyft, and Dropbox. Learn more at semgrep.dev . About the role As a Backend Engineer, you'll work on our backend and infrastructure systems to design, build and maintain a fast and reliable user experience for our customers. You'll collaborate with other engineers to develop the APIs, data models and services that power Semgrep's products at scale. You should have a strong understanding of databases, query

Senior DevTools Engineer San Francisco, Boston, New York, Denver, California, United States About Semgrep Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it's written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog. Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Vanta, Lyft, and Dropbox. Learn more at semgrep.dev . About the Team DevTools will be a new discipline under our existing TechOps team. TechOps' mission is to ensure Semgrep's distributed workforce has the right tools to get their job done. We fall under Semgrep Engineering and value automating processes, being transparent, and minimising friction. DevTools' focus will be on helping Semgrep build better software, faster, and will be designed to support both

Staff AI Product Engineer, Code San Francisco, Boston, New York, Denver, California, United States About Semgrep Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it's written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog. Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Vanta, Lyft, and Dropbox. Learn more at semgrep.dev . About the role As an AI product engineer on Semgrep's Code team, you'll apply cutting-edge AI/ML tools from industry leaders (e.g. OpenAI, Anthropic, Hugging Face, Amazon, Google) to build user-facing security tools that help developers write and ship secure software faster. Semgrep's Code product improves the software developers create by identifying real vulnerabilities without slowing them down. Other security tools often

Growth Marketing Manager, PLG San Francisco Office, San Francisco, United States About Semgrep Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it's written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog. Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Vanta, Lyft, and Dropbox. Learn more at semgrep.dev . About the Role Semgrep has a large and growing base of developers and security engineers who use our product every day, many of them before they ever talk to sales. This role exists to turn that organic interest into a scalable, measurable top-of-funnel engine. As our first dedicated PLG Growth Marketer, you'll own everything pre-sign up: building the campaigns, experiments, and content needed to

Arzt (w/m/d) für Spendebetreuung 14 Locations posted: Posted 10 Days Ago

Senior Application Security Engineer United States of America At Qualia, we've built the leading B2B real estate technology that transforms the home buying and selling experience into a simple, secure, and enjoyable process. Our SMB and Enterprise products bring together users from across the real estate ecosystem---homebuyers and sellers, lenders, title and escrow agents, and real estate agents---onto a single shared digital closing platform, providing greater clarity and transparency to real estate transactions. Today, through our business customers across the country, millions of consumers use Qualia to close on homes every year. WHAT YOU'LL WORK ON We're hiring a Senior Application Security Engineer to join a small, high-leverage AppSec team. This is a deep-technical IC role with a staff-leaning scope: you'll set the technical direction and own delivery on how we find, fix, and prevent vulnerabilities across Qualia's products and cloud infrastructure, and you'll be the person other engineers want in the room when an architecture decision has a security dimension. You'll partner daily with product engineering, infrastructure, and platform teams, and you'll work closely alongside our existing AppSec engineers - raising the technical bar of the team while staying deeply hands-on with code, tooling, and adversarial testing. This is the right role for someone who is as comfortable writing a Burp extension or a Semgrep rule as they are pairing with a product engineer to land a fix. RESPONSIBILITIES - Run offensive assessments against Qualia's applications and infrastructure: manual penetration testing, exploit development, authenticated web/API testing, and adversarial review

Spezialist Quality System DMS/Archiv (w/m/d) - befristet Singen, Germany posted: Posted Today

Product Security Engineer Movable Ink - Toronto Movable Ink scales content personalization for marketers through data-activated content generation and AI decisioning. The world's most innovative brands rely on Movable Ink to maximize revenue, simplify workflow and boost marketing agility. Headquartered in New York City with close to 600 employees, Movable Ink serves its global client base with operations throughout North America, Central America, Europe, Australia, and Japan. Movable Ink is hiring a Product Security Engineer to help secure our codebases, CI/CD pipelines, and development practices. To succeed in this role, you'll balance a security-first mindset with a practical understanding of how engineering teams ship software: finding ways to reduce risk without slowing down delivery. This is a hands-on opportunity to build and improve the automation that keeps our code and infrastructure safe, working closely with both the Security and Engineering teams. As AI coding tools and supply chain attacks increase risk across the industry, this role is critical to staying ahead of vulnerabilities before they reach production. Responsibilities: - Implement and maintain static application security testing (SAST) using Semgrep across our repositories - Configure and improve software composition analysis (SCA) tooling (Dependabot) to identify vulnerable dependencies - Manage secrets detection scanning (Trufflehog) and respond to findings - Integrate security scanning into CI/CD pipelines (GitHub Actions) to catch issues before code is merged - Triage and prioritize vulnerability findings, working with engineering teams to drive remediation - Support dynamic application security testing (DAST) efforts using tools like ZAP - Contribute to

Spezialist Quality System DMS/Archiv (w/m/d) Singen, Germany posted: Posted Today

Sr. Engineer Product Security Bengaluru, India, Bengaluru, Karnataka, India - Serve as the product security subject-matter expert closely collaborating with other NETGEAR product development teams to identify, assess, root-cause, address, validate, and prevent product security issues. - Be the champion for secure and defensive programming techniques and use of automation to eliminate and prevent security problems. - Keep up to date with latest advancements in the field and continually elevate the secure software development practices at NETGEAR. - Use the latest and greatest bug hunting technologies to find security vulnerabilities at scale. Monitor the latest security trends, vulnerabilities, and threat intelligence, and assess their relevance to NETGEAR products. Required Qualifications: - 4 to 9 years of relevant work experience in application security, hardware, IoT security, security pen-testing, vulnerability discovery, secure software development, and design security reviews. - Also, we are looking for someone having Automation Skill along with ProdSec expertise. - Proven track record of implementing and scaling security tooling such as pre-commit hooks with static code analysis (SAST) and dependency security (OSS/SCA), and fine tuning them for the best developer experience. - Experience with using techniques like fuzzing, reverse engineering, writing SAST rules, semgrep, CodeQL, - Excellent knowledge of common security weaknesses (like OWASP top-n lists) and best ways to address them. - Understanding of network security technologies and vulnerabilities, especially in the networking device space. - Strong analytical and problem-solving skills, the ability to work both independently and collaboratively with diverse stakeholders - Excellent written and verbal communication

Skladiščnik (m/ž/d) Mengeš posted: Posted 10 Days Ago

Senior Product Security Engineer San Francisco, CA - US, San Francisco, California, USA Crusoe is on a mission to accelerate the abundance of energy and intelligence . As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack - from electrons to tokens - to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster. We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that - with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI. We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved - people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services. If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe. About This Role Crusoe is building the infrastructure for the next era of AI and high-performance computing; and we're looking for someone to make sure it's built securely from the ground up. As part of the Product

Tehničar u proizvodnji (m/ž) Croatia - Zagreb posted: Posted 9 Days Ago

Senior Security Engineer, Applications US - Remote Who are we and why should you join us? BetterHelp is on a mission to remove the traditional barriers to therapy and make mental health care more accessible to everyone. Founded in 2013, we are now the world's largest online therapy service, providing affordable and convenient therapy across the globe. Our network of over 30,000 licensed therapists has helped millions of people take ownership of their mental health and change their lives forever. And we're not stopping there - as the unmet need for mental health services continues to grow, BetterHelp is committed to being part of the solution. As a Senior Security Engineer, (Applications Team) at BetterHelp, you'll join a diverse team of licensed clinicians, engineers, product pros, creatives, marketers, and business leaders who share a passion for expanding access to therapy. And as a mental health company, we take employee mental health just as seriously as we do our mission. We deeply invest in our team's well-being and professional development, because we know that business and individual growth go hand-in-hand. At BetterHelp, you'll carve your own path, make an immediate impact, and be challenged every day - with a supportive community behind you the whole way. What are we looking for? We are looking for a motivated Application Security Engineer who is looking to help build the maturity of our Application Security Team while growing their own security skill set. Our team prioritizes the full lifecycle of security triage: identifying vulnerabilities,

Medical Science Liaison Manager (m/w/d) im Bereich Hypertension & Hyperkalemia - Nord-Ost (Berlin - Rostock - Magdeburg - Halle) 4 Locations posted: Posted 30+ Days Ago

Site Reliability Engineer - Cybersecurity Palo Alto, CA ABOUT xAI xAI's mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company's mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates. ABOUT THE ROLE: The Cybersecurity / SRE team is focused on ensuring the security and reliability of X Money. This role will primarily focus on the X Money platform but will also cross over with the X Social platform. The ideal candidate will have experience in the banking, money transmission, and P2P payments industry. We emphasize working with large distributed systems and security platforms at scale, with an automation-first mindset. You'll be responsible for securing and maintaining the reliability of X Money's infrastructure. You'll work closely with cross-functional teams to enhance security measures, improve system resilience, and implement best practices. Your role will include: RESPONSIBILITIES: - Build and secure mission-critical applications in a hybrid cloud environment. - Manage identities and roles effectively. - Monitor and remediate infrastructure to comply with regulations

Biostatistical Programming Mgr India - Hyderabad posted: Posted 30+ Days Ago

Senior Developer (Windows), Product Security Remote (United States | Canada) 1Password is growing. We've surpassed $400M in ARR and we're continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partners like Oracle Red Bull Racing. About 1Password At 1Password, we're building the foundation for a safe, productive digital future. Our mission is to unleash employee productivity without compromising security by ensuring every identity is authentic, every application sign-in is secure, and every device is trusted. We innovated the market-leading enterprise password manager and pioneered Unified Access Management, a new cybersecurity category built for the way people and AI agents work today. As one of the most loved brands in cybersecurity, we take a human-centric approach in everything from product strategy to user experience. Over 180,000 businesses, from Fortune 100 leaders to the world's most innovative AI companies, trust 1Password to help their teams securely adopt the SaaS and AI tools they need to do their best work. If you're excited about the opportunity to contribute to the digital safety of millions, to work alongside a team of curious, driven individuals, and to solve hard problems in a fast-paced, dynamic environment, then we want to hear from you. Come join us and help shape a safer, simpler digital future. Security and data privacy are at the core of everything we do at 1Password. The Product Security Team is responsible for implementing new security features across our macOS, iOS,

Arzt (w/m/d) - BioLife Plasmazentrum Klagenfurt AUT - Klagenfurt (Plasmazentrum) posted: Posted 30+ Days Ago

Security Engineer San Francisco, CA, United States About Decagon Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences. Our technology enables industry-defining enterprises like Avis Budget Group, Block's Cash App and Square, Chime, Oura Health, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel. We're building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships. We're proud to be backed by world-class investors who share that vision, including a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures, along with many others. We're an in-office company, driven by a shared commitment to excellence and velocity. Our values - Just Get It Done, Invent What Customers Want, Winner's Mindset, and The Polymath Principle - shape how we work and grow as a team. About the Team The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with complete trust while defending against sophisticated, AI-enabled threats at massive scale. Our mission is to secure our growing platform, ensuring that AI agents and human agents can collaborate safely to help users resolve their issues while maintaining the highest standards of security and privacy. About the Role Help build and scale the

Mehanik (m/ž/d) Ljubljana posted: Posted 30+ Days Ago

Security Engineer New York, NY, New York, NY, USA About the Company Rain makes the next generation of payments possible across the globe. We're a lean and mighty team of passionate builders and veteran founders. Our infrastructure makes stablecoins usable in the real-world by powering card transactions, cross-border payments, B2B purchases, remittances, and more. We partner with fintechs, neobanks, and institutions to help them launch solutions that are global, inclusive, and efficient. You will have the opportunity to deliver massive impact at a hypergrowth company that is funded by some of the top investors in fintech, crypto, and SaaS, including Sapphire Ventures, Norwest, Galaxy Ventures, Lightspeed, Khosla, and several more. If you're curious, bold, and excited to help shape a borderless financial future, we'd love to talk. Our Ethos We believe in an open and flat structure. You will be able to grow into the role that most aligns with your goals. Our team members at all levels have the freedom to explore ideas and impact the roadmap and vision of our company. What You'll Do As a Security Engineer with a focus on Application Security, you'll be a key contributor in embedding security into Rain's engineering lifecycle and supporting delivery of secure, trusted applications: - Lead application security assessments, including vulnerability scanning, code reviews, and threat modeling with engineering teams - Partner closely with product and development squads to drive remediation and help teams understand and resolve security findings efficiently - Integrate and scale automated security tooling across CI/CD

Inženir tehničnih storitev (m/f/d) Ljubljana posted: Posted 29 Days Ago

Senior Security Engineer San Francisco, CA, United States About Decagon Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences. Our technology enables industry-defining enterprises like Avis Budget Group, Block's Cash App and Square, Chime, Oura Health, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel. We're building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships. We're proud to be backed by world-class investors who share that vision, including a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures, along with many others. We're an in-office company, driven by a shared commitment to excellence and velocity. Our values - Just Get It Done, Invent What Customers Want, Winner's Mindset, and The Polymath Principle - shape how we work and grow as a team. About the Team The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with trust while defending against sophisticated, AI-enabled threats at massive scale. Our mission is to provide magical support experiences - ensuring that AI agents and human agents can collaborate safely to help users resolve their issues while maintaining the highest standards of security and privacy. About the Role Lead the application security