Senior/Staff Security Researcher

The role centers on building systems for security research, combining application security, program analysis, and applied AI to enable scalable security workflows. You will set your own research direction, work with customers, and ship research across offerings like Semgrep Code, Semgrep Workflows, Semgrep Guardian, and Semgrep Multimodal. Responsibilities include designing and shipping security workflows, making LLMs viable for security-critical work, improving automated triage and validation, building evaluation benchmarks, encoding security judgments into tooling, learning new technologies quickly, prototyping new products, sharing work publicly, and leading research with impact. Ideal candidates have strong application security expertise, experience finding vulnerabilities and communicating them to developers, fluency in multiple programming languages, a builder’s mindset, experience with applied AI/LLMs, and autonomy. Nice-to-have items include program analysis or compiler background, SAST tooling experience, familiarity with distributed workflows and cloud-native infrastructure, startup experience, and a track record of publishing security research.