As an AI-focused product engineer at Semgrep, you’ll apply modern AI and ML technologies to build user-facing security capabilities that help developers write and ship secure software faster. You’ll work with leading AI platforms and models to cut through the noise common in security tooling, delivering accurate, actionable, and intuitive results that fit naturally into developers’ workflows. AI already plays a meaningful role in how Semgrep identifies and explains vulnerabilities, and you’ll help explore and shape how emerging techniques can further improve signal quality and developer experience. In this role, you’ll collaborate closely with product managers, security researchers, and engineers to design and ship AI-powered features end-to-end—from experimentation and prototyping through production deployment. You’ll integrate AI platform APIs, develop and refine prompt chains, evaluate and tune models using real-world data, and determine how new advances in AI and ML can be responsibly productized. You’ll learn directly from users to understand their needs, iterate quickly in a fast-paced environment, and mentor other engineers along the way. Through Semgrep’s culture of transparency, you’ll have visibility into—and influence over—the decisions that shape our products and technical direction. Your work will contribute directly to Semgrep’s evolution as a trusted, world-leading code analysis and application security platform, with impact felt by developers and security teams across the industry. You’ll learn about the application-security space, mentor more junior developers, collaborate with product managers and other engineers to create security tools our customers love, architect systems for storing and maintaining sensitive data, and help us surface those data back to our users to help them understand their individual security posture. Through Semgrep’s culture of transparency, you’ll see and influence the decisions that make a startup successful. Your decisions will be key to making Semgrep a world-leading static-analysis project, giving you lasting influence not only at Semgrep, but in the world’s developer community. Our stack utilizes Typescript and React on the Frontend, Python, Flask and SQLAlchemy on the Backend, is deployed via Kubernetes and hosted on AWS. Professional experience with these technologies is preferred but not required provided you are open to learning them quickly! This is a hybrid role with the expectation you join us 3+ days per week in our San Francisco, New York, Boston or Denver offices depending on team.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed