Senior Software Engineer, Code Security

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Serve as the primary individual responsible for team initiatives from the design phase to delivery.

• Transition systems developed by individual engineers to team ownership through thorough documentation, testing, and collaborative reviews.

• Create and release analyzers that integrate deterministic analysis with AI-powered analysis.

• Construct evaluation harnesses that assess false positives and missed detections against benchmark applications.

• Formulate detection rules aligned with CWE and develop corresponding test fixtures.

• Prepare analyzers for CI jobs, AI agent workflows, and command-line tools utilizing GitLab security report formats.

• Design and implement manifest, lockfile, and SBOM parsing across various ecosystems and formats.

• Enhance automated remediation processes that convert security advisories into dependency update merge requests.

• Tackle high-level technical challenges and elevate quality, security, and performance in collaboration with cross-functional and partner teams.

• Guide Intermediate engineers through code reviews and collaborative coding sessions.

• Engage in on-call rotations addressing product, security, and urgent engineering challenges.

⛳️ Requirements

• Proven experience in developing your own LLM tooling, such as harnesses, agent pipelines, or evaluations, with the discernment to assess output trustworthiness.

• Significant professional experience in writing and testing production code in a systems language, especially Go and/or Rust, with expertise in at least one.

• Openness to work with Go, Rust, Ruby, and Python.

• Knowledge of package managers and dependency management in one or more ecosystems, including npm, Maven, pip, Bundler, or Cargo.

• Established application security experience, including vulnerability research, secure code reviews, or creation of detection rules.

• Proficiency with OWASP Top 10, CWE, and the software supply chain.

• Proven history of taking initiative on ambiguous challenges and delivering results with minimal supervision.

• Self-driven with organizational skills that thrive in a remote, predominantly asynchronous setting.

• Ability to communicate technical issues clearly and succinctly.

• Skill in drafting design proposals that facilitate team decision-making.

• Desirable: experience in evaluating AI-driven detection against labeled data, performance optimization at scale, program analysis, web/mobile application frameworks, containerized workflows, and CI/CD.

🏝️ Benefits

• Comprehensive benefits to support your health, financial stability, and overall well-being.

• Flexible Paid Time Off.

• Team Member Resource Groups.

• Equity Compensation & Employee Stock Purchase Plan.

• Growth and Development Fund.

• Parental Leave.