As a Software Engineer on the Code Rules team, you will work side‑by‑side with our security researchers to evolve the engine that powers our detections. You will understand and interact with the static analysis (SAST) engine to help us extend its reach and make our rules better, while building the tooling that makes rule writing efficient and scalable.
Your work involves interaction with the engine's internals to simplify how we define patterns, extend its reach to new classes of vulnerabilities, and find ways to innovate on how we detect flaws in complex codebases. We are also leveraging AI to accelerate our own development cycles and to blend it with traditional SAST logic to push the boundaries of what automated tools can find.
You'll spend your time by doing the following: