Jobs and Careers
R2
Senior Software Engineer, Backend
r2cUKRemotefull_timeVerifiedPosted 9 Mar 2023
About the role
About r2c
Our mission is to make world-class software security available to everyone. This means building program analysis tools that are open source, easy to use, powerful, and fast. It also means building a team with security expertise and a passion for great developer experiences. Most of all, it means working with honesty and respect in a diverse community of dreamers and builders. We’ve redefined static analysis tooling by committing to all of these, and turned our project, Semgrep, into an essential safeguard for code at Snowflake, Dropbox, and more.
Semgrep (r2c) is a startup with a mission to profoundly improve software security and reliability to safeguard human progress. We make developer-friendly security tools that make writing secure, efficient, and correct code both easy and fast. We value impactful, mission-focused work performed in a culture of mutual respect and honesty.
As a senior backend developer working on our cloud product, you’ll work on a full-stack team that builds and maintains our free and paid-tier products on https://semgrep.dev. Semgrep is used by some of the world’s leading tech companies, including Snowflake, Slack, and Shopify, to guarantee the security of their codebases. Working hand-in-hand with Semgrep’s community of security researchers and program-analysis experts, you’ll rapidly identify and solve issues before they impact our users and collaborate with our customers to run Semgrep at scale within their environments.
You’ll learn about the application-security space, mentor more junior developers, collaborate with product managers and other engineers to create security tools our customers love, architect systems for storing and maintaining sensitive data, and help us surface those data back to our users to help them understand their individual security posture. Through r2c’s culture of transparency, you’ll see and influence the decisions that make an early-stage startup successful. As a member of a small engineering team with a culture of permissionless innovation, your contributions will affect every aspect of our products, giving your contributions meaningful impact now and as r2c grows.
You will:-Work directly with our users to identify where our product succeeds, and where it fails; then rapidly improve it-Advocate for and develop intuitive, simple, robust APIs that solve a wide variety of complex problems using simple, elegant abstractions-Adapt Semgrep to work with our users’ diverse ecosystems of code bases, build environments, and security requirements-Ensure continual, high-availability operation of services using modern site-reliability practices, including participation in an on-call rotation-Advise and mentor r2c engineers via thoughtful code reviews, planning discussions, technical documentation, and formal mentorship-Help grow our team, by participating in the recruitment and hiring of top engineering talent
You are ideal for this role if you have:-4+ years of demonstrated experience building web applications-Excitement about building for customers, learning their needs, iterating fast, and seeing your solutions solve their problems-Excellent, proactive communication, both verbal and written, including a demonstrated history of crafting thorough, discoverable documentation-Experience carrying technical projects to completion-An experimental, data-informed approach to identifying technical requirements; at r2c we take a “fail fast” approach, and ship minimally viable work in order to learn quickly-The ability to work hours compatible with the US west-coast (PST) (IF REMOTE)-The ability to come into the downtown SF office at least 3 days/week on average (IF IN-PERSON)
Some example projects that you might work on include:-Build customer-deployable AWS components to inject notification streams into customers’ data warehouses-Scope and build a new workflow for users that helps them understand and remediate the issues that Semgrep finds in their code bases-Identify and escalate performance issues across the stack from our users’ build pipelines to their web and daily experience-Triage missing comments on GitHub pull requests, rapidly identify a race condition in GitHub’s API, and build retry logic to reliably deliver these commentsWhat we offer
Our goal is to competitively and fairly compensate every r2cer with a system that equally rewards those who are vocal and those who are less comfortable making demands during the final steps of the hiring process. To that end, we generate internal compensation bands that are used when discussing and negotiating salaries. We update these based on market data to make sure they’re above the average for comparable roles.
We also invest in our employees’ well-being and long term success with comprehensive health plans, generous vacation time, learning stipends, and more. Our benefits are for everyone, so that you’re taken care of, and we work with individ
Our mission is to make world-class software security available to everyone. This means building program analysis tools that are open source, easy to use, powerful, and fast. It also means building a team with security expertise and a passion for great developer experiences. Most of all, it means working with honesty and respect in a diverse community of dreamers and builders. We’ve redefined static analysis tooling by committing to all of these, and turned our project, Semgrep, into an essential safeguard for code at Snowflake, Dropbox, and more.
Semgrep (r2c) is a startup with a mission to profoundly improve software security and reliability to safeguard human progress. We make developer-friendly security tools that make writing secure, efficient, and correct code both easy and fast. We value impactful, mission-focused work performed in a culture of mutual respect and honesty.
As a senior backend developer working on our cloud product, you’ll work on a full-stack team that builds and maintains our free and paid-tier products on https://semgrep.dev. Semgrep is used by some of the world’s leading tech companies, including Snowflake, Slack, and Shopify, to guarantee the security of their codebases. Working hand-in-hand with Semgrep’s community of security researchers and program-analysis experts, you’ll rapidly identify and solve issues before they impact our users and collaborate with our customers to run Semgrep at scale within their environments.
You’ll learn about the application-security space, mentor more junior developers, collaborate with product managers and other engineers to create security tools our customers love, architect systems for storing and maintaining sensitive data, and help us surface those data back to our users to help them understand their individual security posture. Through r2c’s culture of transparency, you’ll see and influence the decisions that make an early-stage startup successful. As a member of a small engineering team with a culture of permissionless innovation, your contributions will affect every aspect of our products, giving your contributions meaningful impact now and as r2c grows.
You will:-Work directly with our users to identify where our product succeeds, and where it fails; then rapidly improve it-Advocate for and develop intuitive, simple, robust APIs that solve a wide variety of complex problems using simple, elegant abstractions-Adapt Semgrep to work with our users’ diverse ecosystems of code bases, build environments, and security requirements-Ensure continual, high-availability operation of services using modern site-reliability practices, including participation in an on-call rotation-Advise and mentor r2c engineers via thoughtful code reviews, planning discussions, technical documentation, and formal mentorship-Help grow our team, by participating in the recruitment and hiring of top engineering talent
You are ideal for this role if you have:-4+ years of demonstrated experience building web applications-Excitement about building for customers, learning their needs, iterating fast, and seeing your solutions solve their problems-Excellent, proactive communication, both verbal and written, including a demonstrated history of crafting thorough, discoverable documentation-Experience carrying technical projects to completion-An experimental, data-informed approach to identifying technical requirements; at r2c we take a “fail fast” approach, and ship minimally viable work in order to learn quickly-The ability to work hours compatible with the US west-coast (PST) (IF REMOTE)-The ability to come into the downtown SF office at least 3 days/week on average (IF IN-PERSON)
Some example projects that you might work on include:-Build customer-deployable AWS components to inject notification streams into customers’ data warehouses-Scope and build a new workflow for users that helps them understand and remediate the issues that Semgrep finds in their code bases-Identify and escalate performance issues across the stack from our users’ build pipelines to their web and daily experience-Triage missing comments on GitHub pull requests, rapidly identify a race condition in GitHub’s API, and build retry logic to reliably deliver these commentsWhat we offer
Our goal is to competitively and fairly compensate every r2cer with a system that equally rewards those who are vocal and those who are less comfortable making demands during the final steps of the hiring process. To that end, we generate internal compensation bands that are used when discussing and negotiating salaries. We update these based on market data to make sure they’re above the average for comparable roles.
We also invest in our employees’ well-being and long term success with comprehensive health plans, generous vacation time, learning stipends, and more. Our benefits are for everyone, so that you’re taken care of, and we work with individ
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s