Senior Software Engineer - Static Analysis
Kai · San Jose, CA · 4 days ago
Engineering$125/hrFull-time
About the role
We’re looking for a Senior Software Engineer with deep experience in static analysis and systems engineering to own and evolve our core analysis platform.
Responsibilities
- Define how we analyze code at scale, what “reachable” and “exploitable” mean in practice, and where we invest for accuracy, coverage, and performance.
- Own the technical direction of our static analysis stack—from IR/bytecode analysis through inter-procedural CFG and data-flow systems—and make principled trade-offs between precision, scalability, and time-to-ship.
- Define and evolve reachability and exploitability models for application and dependency vulnerabilities, aligning analysis outputs with how security teams prioritize and remediate risk.
- Drive language and runtime expansion by evaluating coverage gaps, sequencing language support, and choosing the right abstractions so new languages don’t require reinventing the core engine.
- Lead performance and scalability initiatives for enterprise-scale codebases—profiling bottlenecks, shaping architecture for parallel/distributed analysis, and establishing measurable targets for throughput and resource use.
- Partner with security researchers to translate emerging threat models and vulnerability classes into concrete analysis capabilities, test cases, and product requirements.
- Collaborate with platform engineers on APIs, CI/CD integration, and developer workflows so analysis results are actionable in production pipelines—not just technically correct.
- Guide engineering execution through design reviews, technical specs, and hands-on prototyping; mentor engineers on program analysis concepts and our analysis architecture.
- Identify and champion patentable and foundational innovations that strengthen our long-term technical moat in code security analysis.
Requirements
- 7+ years of software engineering experience, with 4+ years in static analysis, program analysis, compiler infrastructure, or closely related domains.
- Deep understanding of core program analysis concepts: Control-flow and data-flow analysis, Call graph construction, Inter-procedural analysis, Taint tracking and reachability analysis.
- Strong programming skills in Java, Go, C++, or comparable systems/backend languages, with comfort working across analysis engine codebases.
- Practical experience handling real-world language and runtime complexity - reflection, dynamic dispatch, indirect calls, and framework-specific behavior.
- Experience building scalable analysis or backend systems for large, production codebases, with attention to performance and reliability.
- Technical judgment and ownership - able to make architecture and trade-off decisions, drive design direction, and work effectively with minimal oversight.
- Comfort operating in a fast-moving startup environment, balancing depth of analysis with shipping velocity and product impact.
Qualifications
- Background in application security or vulnerability analysis, with practical understanding of reachability, exploitability, and how security teams triage and remediate findings.
- Experience building developer tooling, compilers, or security infrastructure at scale—where correctness, performance, and usability all matter.
- Familiarity with program analysis research, with interest in applying academic advances to real-world codebases and product constraints.
- Track record of technical leadership - architecture decisions, design reviews, mentoring, or driving cross-functional initiatives in complex engineering domains.
Skills
- Deep experience with LLVM, MLIR, SSA-based analysis, or comparable compiler/analysis IRs—and judgment on when to build vs. integrate existing frameworks.
- Experience building scalable analysis or backend systems for large, production codebases, with attention to performance and reliability.
- Comfort operating in a fast-moving startup environment, balancing depth of analysis with shipping velocity and product impact.
- Track record of technical leadership - architecture decisions, design reviews, mentoring, or driving cross-functional initiatives in complex engineering domains.
Benefits
- Competitive compensation: Highly competitive salary, meaningful equity, and a culture where your contributions are recognized and rewarded as we grow.
Pay
- Competitive salary based on experience and qualifications.
Schedule
- Full-time position.