Software Engineer With Static Analysis, Semgrep, Antlr Experience

We are a stealth startup firm specializing in software security with a world class business and technical leadership team. Our solution combines the benefits of static analysis with Dynamic Application Security Testing (DAST) to trace exploitable vulnerabilities to the line of code. We’re looking for a Static analysis expert to help develop a breakthrough security product through our static analysis engine that we built from the ground up. This role supports the creation and automation of DAST and Static Application Security Testing (SAST) capabilities in our product which is critical to creating a product that is powerful, meticulous, extensible, and delightful to use. You should have strong experience in static analysis, with a passion for building awesome developer tools and research/prototyping (there is lots of prototyping in this role!). You will have the opportunity to help build the fastest and most accurate security testing tool on the market.

Location: Remote Work (EST timezone)

Responsibilities

● Perform complex and multi-level static analysis engine development tasks.

● Prototyping/coding new security solutions to solve complex application security problems

● Help build a next-generation static analysis engine

● Adding support for more languages, frameworks, and rules

● Coding proof of concepts for automating security testing tools

Skills Required

● Strong understanding of the principles of static analysis, program analysis, Abstract Syntax Trees (ASTs), Context free grammars.

● 5+ years of experience working on building static analysis tools

● Ability to both orchestrate security testing tools as well as understanding the complex underpinnings and fundamentals of how they work. For example, you should have experience and opinions about Abstract Syntax Trees (ASTs) for SAST, parser generators, and static vs dynamic languages.

● Experience with Golang is a plus.

● Experience with static analysis tools and libraries, such as ANTLR, Tree-sitter, Roslyn, Clang API etc.

● You do not need experience in building Cloud infrastructure, but it is a plus and you should be willing to learn

● Write clear and accurate documentation

● Good technical acumen, ability to quickly digest concepts/principles and apply practically

● Strong analytical & problem-solving ability

● Ability to communicate concepts, issues and solutions to others

Other Requirements

● BS degree in software engineering or computer science, or equivalent work experience

● Strong effective communication skills, both written and verbal

● Experience working in agile environment and multinational distributed teams

● Flexible hours, need to be available to work occasionally on calls with a global team

● Startup / entrepreneurial experience is a plus