As a Program Analysis engineer, you’ll work on the beating heart of our business - the world-class Semgrep engine that analyzes source code to detect high-impact real-world security vulnerabilities. You’ll collaborate closely with our Security Research team to improve the quality and quantity of vulnerabilities detected in source code written in an ever-growing set of programming languages using state-of-the-art static analysis and program analysis techniques. Additionally, you’ll quantify and optimize the performance of the engine using data-driven approaches wherever it runs - from our hosted Managed Scanning platform to AI Agents via MCP. Our stack utilizes OCaml, Python, OpenTelemetry and Datadog. Professional experience with OCaml is preferred but not required provided you are willing to learn quickly and have other functional programming experience. This is a hybrid role with the expectation you’ll join us 3+ days per week in our San Francisco, New York, Boston or Denver offices depending on team.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed