Jobs and Careers
R2
Sr. Program Analysis Engineer
r2cUKRemotefull_timeVerifiedPosted 24 Mar 2023
About the role
About r2c
Our mission is to make world-class software security available to everyone. This means building program analysis tools that are open source, easy to use, powerful, and fast. It also means building a team with security expertise and a passion for great developer experiences. Most of all, it means working with honesty and respect in a diverse community of dreamers and builders. We’ve redefined static analysis tooling by committing to all of these, and turned our project, Semgrep, into an essential safeguard for code at Snowflake, Dropbox, and more.
Job DescriptionWe are looking for a program analysis engineer to join our dynamic team and help us power Semgrep.You'll have the opportunity to learn and grow by working with developers and security professionals at all levels, from startups to social media giants. You'll collaborate with passionate program analysis experts who are dedicated to making developers' lives easier. As a valued member of our team, you'll help shape our company's future and mission. Every feature you create will have a tangible impact on our users' lives, and we are excited to see what you do.
What you'll doDesign and help build world-class pragmatic software analysis tools for the security practitioners and developersCollaborate with engineers, product managers, and other partners to identify the most meaningful issues affecting today’s developersCraft high quality tools and checks to discover and fix these issues in our users’ codebasesDevelop systems or frameworks (e.g. linters, analysis tools, and other developer-workflow integrations) that help other engineers improve security
You are ideal for this role if you haveA bachelor's degree in Computer Science, similar technical field of study, or equivalent practical experienceExcitement about building for customers, learning their needs, iterating fast, and seeing your solutions solve their problemsExperience with functional languages like OCaml, Haskell, or ScalaExperience in one dynamic language like Python, Ruby, Javascript, or PHPFamiliarity with program analysis and transformation concepts and tools, e.g. SSA, LLVM IR, taint trackingAn interest in compilers, programming languages, functional programming, or program analysisA passion for software security
Some example projects that you might work on includeExtend the capabilities of Semgrep (a semantic-grep, see https://semgrep.dev/) to support more complex patterns or to handle more programming languagesImplement from scratch a parser for a new language (e.g., extend or add new grammars for https://tree-sitter.github.io/tree-sitter/ )Refine generic ASTs to support more programming languagesImplement dataflow analysis to find bugsUse Datalog to implement complex and novel program analysis (pointer analysis, taint tracking, SQL injection detection)What we offer
Our goal is to competitively and fairly compensate every r2cer with a system that equally rewards those who are vocal and those who are less comfortable making demands during the final steps of the hiring process. To that end, we generate internal compensation bands that are used when discussing and negotiating salaries. We update these based on market data to make sure they’re above the average for comparable roles.
We also invest in our employees’ well-being and long term success with comprehensive health plans, generous vacation time, learning stipends, and more. Our benefits are for everyone, so that you’re taken care of, and we work with individuals to make sure they have what they need, whether that’s quiet work space, adjusted hours, or any other accommodation.
Who we are
We have people from France and the Philippines, physics and philosophy, formal methods research and full fledged corporations. We’re new parents and new grads, aspiring authors and adrenaline addicts, dog lovers and dogfooders. We get together often to bike, bake, and meet up in parks. In our interactions, we believe respect and honesty go hand in hand, and prioritize both.
r2c is an equal-opportunity employer seeking a diverse range of backgrounds. We value who you are — including your cultural heritage, your socioeconomic status, your age, your race, your gender, your sexual orientation, your disabilities. We value what’s vitally important to you — your family, your religion, your politics. We value what you love in this world — your music, your weekend pursuits. We believe in welcoming varied professional backgrounds, educations, and interests. If you’re exceptional in your role, believe in r2c’s mission, and treat r2c’s values as your own, you belong here.
You will need working proficiency and communication skills in verbal and written English. We work as a hybrid on-site / remote organization. r2c primarily works in the Pacific, Eastern, and Central EU time zones.
Our mission is to make world-class software security available to everyone. This means building program analysis tools that are open source, easy to use, powerful, and fast. It also means building a team with security expertise and a passion for great developer experiences. Most of all, it means working with honesty and respect in a diverse community of dreamers and builders. We’ve redefined static analysis tooling by committing to all of these, and turned our project, Semgrep, into an essential safeguard for code at Snowflake, Dropbox, and more.
Job DescriptionWe are looking for a program analysis engineer to join our dynamic team and help us power Semgrep.You'll have the opportunity to learn and grow by working with developers and security professionals at all levels, from startups to social media giants. You'll collaborate with passionate program analysis experts who are dedicated to making developers' lives easier. As a valued member of our team, you'll help shape our company's future and mission. Every feature you create will have a tangible impact on our users' lives, and we are excited to see what you do.
What you'll doDesign and help build world-class pragmatic software analysis tools for the security practitioners and developersCollaborate with engineers, product managers, and other partners to identify the most meaningful issues affecting today’s developersCraft high quality tools and checks to discover and fix these issues in our users’ codebasesDevelop systems or frameworks (e.g. linters, analysis tools, and other developer-workflow integrations) that help other engineers improve security
You are ideal for this role if you haveA bachelor's degree in Computer Science, similar technical field of study, or equivalent practical experienceExcitement about building for customers, learning their needs, iterating fast, and seeing your solutions solve their problemsExperience with functional languages like OCaml, Haskell, or ScalaExperience in one dynamic language like Python, Ruby, Javascript, or PHPFamiliarity with program analysis and transformation concepts and tools, e.g. SSA, LLVM IR, taint trackingAn interest in compilers, programming languages, functional programming, or program analysisA passion for software security
Some example projects that you might work on includeExtend the capabilities of Semgrep (a semantic-grep, see https://semgrep.dev/) to support more complex patterns or to handle more programming languagesImplement from scratch a parser for a new language (e.g., extend or add new grammars for https://tree-sitter.github.io/tree-sitter/ )Refine generic ASTs to support more programming languagesImplement dataflow analysis to find bugsUse Datalog to implement complex and novel program analysis (pointer analysis, taint tracking, SQL injection detection)What we offer
Our goal is to competitively and fairly compensate every r2cer with a system that equally rewards those who are vocal and those who are less comfortable making demands during the final steps of the hiring process. To that end, we generate internal compensation bands that are used when discussing and negotiating salaries. We update these based on market data to make sure they’re above the average for comparable roles.
We also invest in our employees’ well-being and long term success with comprehensive health plans, generous vacation time, learning stipends, and more. Our benefits are for everyone, so that you’re taken care of, and we work with individuals to make sure they have what they need, whether that’s quiet work space, adjusted hours, or any other accommodation.
Who we are
We have people from France and the Philippines, physics and philosophy, formal methods research and full fledged corporations. We’re new parents and new grads, aspiring authors and adrenaline addicts, dog lovers and dogfooders. We get together often to bike, bake, and meet up in parks. In our interactions, we believe respect and honesty go hand in hand, and prioritize both.
r2c is an equal-opportunity employer seeking a diverse range of backgrounds. We value who you are — including your cultural heritage, your socioeconomic status, your age, your race, your gender, your sexual orientation, your disabilities. We value what’s vitally important to you — your family, your religion, your politics. We value what you love in this world — your music, your weekend pursuits. We believe in welcoming varied professional backgrounds, educations, and interests. If you’re exceptional in your role, believe in r2c’s mission, and treat r2c’s values as your own, you belong here.
You will need working proficiency and communication skills in verbal and written English. We work as a hybrid on-site / remote organization. r2c primarily works in the Pacific, Eastern, and Central EU time zones.
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s