Software Engineer (sast)

Snyk Snyk · Enterprise · London, United Kingdom

Software Engineer on the Code Rules team at Snyk, focusing on evolving the static analysis (SAST) engine. The role involves analyzing, designing, and implementing solutions to improve vulnerability detection, building tooling for rule writing efficiency, and integrating AI/LLMs to enhance SAST logic and accelerate development cycles. The primary deliverable is a secure AI software development platform.

What you'd actually do

  1. Analyzing, designing and implementing high-quality solutions to problems with well-tested, maintainable code.
  2. Building systems with the long-term in mind, focusing on good design, robust testing, and sustainability from the perspective of cost and scale.
  3. Supporting our customers by resolving bugs and customer support escalations.
  4. Collaborate with Security Researchers to author high-precision detection rules using our proprietary logic and domain-specific languages to identify vulnerabilities across various codebases.
  5. Building and maintaining tools and frameworks that accelerate the development, testing, and deployment of security rules.
  6. Researching and implementing ways to enhance vulnerability detection, using static analysis and AI.

Skills

Required

  • At least 3 years experience in software engineering.
  • Proficiency in at least one programming language.
  • Experience working with or building static analysis tools (SAST), linters, or compiler-related technologies.
  • The ability to understand complex, abstract systems like data-flow engines or abstract syntax trees.
  • Strong commitment to code quality, and the value of giving and receiving feedback through code reviews.
  • Effective communicator both verbally and in writing.
  • A collaborative approach to problem-solving within a cross-functional team.

Nice to have

  • Have a genuine interest in cybersecurity and application security.
  • Have experience with AI/ML integration, specifically using LLMs to solve engineering or security problems.
  • Have experience with formal methods, static analysis.

What the JD emphasized

  • Experience working with or building static analysis tools (SAST), linters, or compiler-related technologies.

Other signals

  • AI-native Developer Security Platform
  • leveraging AI to accelerate our own development cycles
  • blend it with traditional SAST logic to push the boundaries of what automated tools can find
  • using LLMs to solve engineering or security problems