About the job
About Semgrep
Semgrep is at the forefront of code security for developers, enabling seamless innovation without hindrance. Our platform allows teams to identify, flag, and resolve genuine issues before deployment, utilizing a security system that evolves alongside development. With Semgrep, code is secured as it is created, offering developers the necessary guardrails to accelerate their work while maintaining security. Our solution is built for developers and trusted by security professionals, integrating smoothly into their workflows to provide timely fixes while ensuring visibility and control for security teams. Semgrep leverages AI to enhance its capabilities, dramatically reducing false positives and prioritizing actionable vulnerabilities, as affirmed by 95% of security reviewers across 6 million findings. We are committed to achieving zero false positives, helping AppSec teams to reduce false positive triage by 80% across Code and Supply Chain, significantly alleviating backlog issues.
Founded in San Francisco and backed by renowned investors such as Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep has received recognition from Gartner in Application Security Testing and is trusted by leading companies like Snowflake, Dropbox, and Figma. Discover more at semgrep.dev.
About the Role
As a Senior Program Analysis Software Engineer, you will be instrumental in driving the core functionality of our Semgrep engine, which meticulously analyzes source code to uncover significant real-world security vulnerabilities. You will collaborate closely with our Security Research team to enhance the detection capabilities for a diverse array of programming languages, employing cutting-edge static analysis and program analysis techniques. Your role will also involve quantifying and optimizing the engine's performance using data-driven methodologies across various platforms, including our Managed Scanning service and AI Agents via MCP.
Our technology stack includes OCaml, Python, OpenTelemetry, and Datadog. While prior experience with OCaml is preferred, it is not mandatory, provided you are eager to learn quickly and possess a background in other functional programming languages.
This is a hybrid position, requiring you to be present in our San Francisco, New York, Boston, or Denver offices at least three days a week, depending on your team.
Compensation
The anticipated annual salary range for this role is between $160,000 and $207,000 USD. The actual salary will be determined based on various factors, including job-related skills, experience, qualifications, location, internal equity, and market conditions. In addition to the base salary, total compensation may also include equity...

