[Job/remote] Semgrep is hiring FP developers to work on the static analysis engine

Semgrep is an application security company focused on detecting and remediating vulnerabilities. The static analysis engine is primarily written in OCaml. We are looking for a senior software engineer to join the Code team, where we focus on first-party code vulnerability and secrets scanning.

The ideal candidate has experience building program analysis tooling or code scanners (perhaps in a research context).

Both on-site and remote work are OK.

If this sounds interesting to you, see our job posting at Senior Program Analysis Engineer, Code.

Let me know if you have any questions!

4 Likes

I find it interesting this company is rolling a custom static analysis engine. As opposed to being like consultants for developing code in languages with native support for advanced bug detection like idris2, F* or dependent haskell

1 Like