Semgrep

About Semgrep

Semgrep is a fast, open-source static analysis tool that helps developers find bugs and enforce code standards across multiple programming languages. Their primary customers are software development teams, security engineers, and DevOps professionals who need to identify vulnerabilities and maintain code quality in their applications. The company's main product is the Semgrep static analysis engine, which scans source code for potential security issues, bugs, and style violations through customizable rules. As a fully distributed company, Semgrep embraces remote work with team members collaborating across different time zones, focusing on asynchronous communication and results-oriented productivity.

Company Culture

Semgrep fosters a collaborative, engineering-driven culture where technical excellence and security impact are highly valued. The distributed team operates with strong emphasis on asynchronous communication, trust, and autonomy, allowing employees to work effectively from anywhere. Team members are encouraged to take ownership of projects while maintaining open communication channels for knowledge sharing and problem-solving.

Our Values

Security first, developer empathy, open source commitment, technical excellence, collaborative problem-solving, and making security accessible to all developers.

Benefits & Perks

Semgrep offers comprehensive health insurance, dental and vision coverage, and generous paid time off. Employees receive competitive salaries, equity compensation, and home office stipends to support remote work. The company provides learning and development budgets for professional growth and hosts regular team offsites to foster connection among distributed team members.

Roles & Teams We Hire For

Skills & Tools You'll Use

Open Positions (50)