Staff Security Advocate
@ Semgrep

Hybrid
$175,000
Hybrid
Full Time
Posted 1 day ago

Your Application Journey

Personalized Resume
Apply
Email Hiring Manager
Interview

Email Hiring Manager

XXXXXXXXX XXXXXXXXX XXXXXXX****** @semgrep.com
Recommended after applying

Job Details

About Semgrep

Semgrep is on a mission to make it expensive to exploit software. As the team behind the most popular SAST, they built the Semgrep AppSec Platform to deliver industry-leading code, dependency, and secrets scanning so organizations can ship secure code quickly without slowing down development. Leading companies like Snowflake, Plaid, Figma, Lyft, and Dropbox rely on Semgrep to secure their software. Semgrep is funded by top investors including Felicis Ventures, Lightspeed Venture Partners, Menlo Ventures, Redpoint Ventures, and Sequoia Capital.

About The Role

The Staff Security Advocate will drive awareness and preference for Semgrep within both application security and software development communities. This role involves educating teams on secure coding, driving delightful product onboarding experiences, and encouraging community champions to amplify Semgrep's messages.

What You’ll Do

  • Security Research & Thought Leadership: Partner with security researchers and publish original research.
  • Content Creation: Produce technical content including blogs, videos, and presentations.
  • Community Building & Evangelism: Engage with security practitioners and lead hands-on training sessions.
  • Product Feedback Loop: Translate community feedback into product enhancements.

You are ideal for this role if you have

  • Technical Security Expertise: 8+ years identifying, analyzing, and remediating security vulnerabilities.
  • Software Development & Tools: Proficiency in Python, JavaScript, Java, Go and modern development workflows.
  • Communication & Advocacy Skills: Ability to simplify complex concepts and excellent public speaking experience.

Compensation

Salary Range: $147,500 - $199,500. Note: The range is for candidates based in the San Francisco Bay Area. Compensation includes equity and comprehensive benefits.

What We Offer

Semgrep provides competitive pay, internal compensation bands adjusted per market data, comprehensive health plans, generous vacation, 401k, learning stipends, and other benefits tailored to employee needs.

Who We Are

A diverse team from various backgrounds including technology, academic research, and more. We value respect, honesty, and individual uniqueness. Semgrep is an equal-opportunity employer that welcomes diverse professional backgrounds and life experiences.

Location Expectations

This role is remote friendly, with some travel expected. For US-based roles open to remote work, hiring is limited to select states.

Key skills/competency

  • Security
  • Advocacy
  • Research
  • Content
  • Community
  • SAST
  • Python
  • CI/CD
  • Cloud
  • OWASP

How to Get Hired at Semgrep

🎯 Tips for Getting Hired

  • Customize your resume: Highlight relevant security and advocacy experiences.
  • Research Semgrep: Understand their mission and recent security research.
  • Tailor your cover letter: Mention experience with SAST and coding.
  • Prepare for interviews: Brush up on technical and communication skills.

📝 Interview Preparation Advice

Technical Preparation

Review SAST and secure coding principles.
Study CI/CD pipelines and containerization basics.
Practice technical content creation and tool demonstrations.
Brush up on multi-language programming skills.

Behavioral Questions

Describe overcoming a technical challenge.
Explain a time you led a workshop.
Share experience engaging diverse teams.
Detail how you handle complex feedback.

Frequently Asked Questions