Senior Software Engineer, Security Factory: Code Security

What you'll do

• Design and ship analyzers that combine deterministic analysis with AI-driven reasoning to detect security vulnerabilities.
• Build evaluation harnesses to measure false positives and missed findings against benchmark applications with known vulnerabilities.
• Develop and maintain parsers for dependency manifests, lockfiles, and SBOMs to identify project dependencies.
• Extend the automated remediation service to turn security advisories into automated merge requests for dependency updates.
• Package security analyzers for use in CI jobs, AI agent workflows, and command-line tools.
• Act as the directly responsible individual for team initiatives from initial design through final delivery.
• Mentor intermediate engineers through code reviews, pair programming, and maintaining internal coding standards.
• Participate in on-call rotations to troubleshoot product operations and urgent engineering issues.

What we're looking for

• Substantial professional experience writing and testing production code in Go and/or Rust.
• Demonstrated application security experience including vulnerability research, secure code review, or writing detection rules.
• Fluency with vulnerability classes such as OWASP Top 10 and CWE.
• Experience building LLM tooling like harnesses, agent pipelines, or evaluations.
• Familiarity with package managers and dependency management in ecosystems like npm, Maven, pip, Bundler, or Cargo.
• Demonstrated capacity to communicate technical problems clearly and write design proposals.
• Experience evaluating AI-driven detection against labeled data (preferred).
• Hands-on program analysis experience such as parsing, ASTs, or data-flow analysis (preferred).