Ofertas › Semgrep
Semgrep · San Francisco, Boston, New York, Denver · Remoto
ABOUT SEMGREP
Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it’s written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog.
Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Vanta, Lyft, and Dropbox. Learn more at semgrep.dev http://semgrep.dev.
ABOUT THE ROLE
As an EM for Semgrep's supply chain team, you’ll lead a team building customer-facing tools to help developers secure their software from vulnerabilities introduced by dependencies. Other supply chain management tools exist, but they produce far too much noise to be useful or efficient. Security teams may review thousands of vulnerabilities, informing developers that hundreds of their dependencies have introduced critical vulnerabilities and need updating, when in reality they are not even using those dependencies in a vulnerable way. Perhaps you’ve even felt this pain yourself!
Our goal is to cut through the noise: to make it easy to find and remediate the 20% of vulnerabilities that are actually reachable given the way our customers’ use their dependencies. We work to make supply chain security as simple and intuitive for our users as possible so developers can focus on their own mission.
You'll help Semgrep be the leading application security platform while mentoring junior engineers, collaborating on customer-loved tools, architecting data systems, and helping users understand their security posture. Through Semgrep's culture of transparency, you'll see and influence the decisions that make a startup successful.
You will:
- Work closely with your product and design partners to create a roadmap for the success of your product that balances iterative changes with big bets
- Prioritize and direct your team’s schedule, balancing the needs of developing new technology and internal technical quality
- Retain and strengthen engineers with coaching and mentorship, regular feedback, performance reviews, and performance management when necessary
- Build an environment of trust that rewards creativity, risk taking, and personal responsibility