Senior Software Engineer

Responsibilities

• Own team initiatives from design through delivery with minimal guidance.
• Design and ship hybrid security analyzers and evaluation harnesses that measure false positives and missed findings against vulnerable benchmark applications.
• Develop detection rules mapped to CWE and test fixtures that validate analyzer behavior.
• Package analyzers for CI jobs, AI agent workflows, and command-line tools with findings reported in GitLab security report formats.
• Build manifest, lockfile, and SBOM parsing for dependency analysis across new ecosystems and formats.
• Extend the automated remediation service from sandboxed dependency updates through merge request creation.
• Improve systems for quality, security, performance, and maintainability while addressing complex team-wide technical problems.
• Mentor intermediate engineers through code review and pairing and maintain internal engineering standards.
• Participate in on-call rotations for product operations, security operations, and urgent engineering issues.

Requirements

• Experience building LLM tooling such as harnesses, agent pipelines, or evaluation systems.
• Substantial professional experience writing and testing production code in a systems language, with depth in Go and/or Rust.
• Familiarity with package managers and dependency management in ecosystems such as npm, Maven, pip, Bundler, or Cargo.
• Application security experience including vulnerability research, secure code review, or writing detection rules.
• Fluency with vulnerability classes including the OWASP Top 10 and CWE and with the software supply chain.
• Track record of owning ambiguous problems and shipping with minimal guidance in a remote, largely asynchronous environment.
• Clear technical communication skills and experience writing design proposals that drive team decisions.
• Helpful experience includes evaluating AI-driven detection against labeled data, performance optimization at scale, program analysis, application frameworks, and containerized workflows or CI/CD.
• Experience with Ruby, Python, or Docker is useful because these technologies are used in the team’s systems and workflows.

Benefits

• Remote-global work arrangement with largely asynchronous collaboration.
• Benefits supporting health, finances, and well-being.
• Flexible paid time off.
• Team Member Resource Groups.
• Equity compensation and Employee Stock Purchase Plan.
• Growth and Development Fund.
• Parental leave.