Full-Time

Head of Talent

Posted on 11/7/2025

Semgrep

Semgrep

201-500 employees

Static code vulnerability scanning for SDLC

Compensation Overview

$185k - $225k/yr

+ Equity + Benefits

San Francisco, CA, USA

In Person

In-office requirement: at least 2 days per week; no remote flexibility.

Category
People & HR (1)
Requirements
  • Have led the full talent function before and you're ready to do it again at a fast-moving company.
  • Know how to partner with executives and bring a strong, informed point of view to the table — but you’re also the kind of person who listens, adapts, and builds trust over time.
  • Have a clear sense of what great looks like, but don’t need to reinvent everything — you know how to meet a team where they are, guide thoughtfully, and scale what’s already working well.
  • Bring executive presence and credibility, both in 1:1 conversations and in high-stakes leadership settings — you’re confident presenting to execs and know how to influence without ego.
  • Have managed and grown high-performing teams, and care about doing so in a way that’s thoughtful, values-aligned, and built to last.
  • Think in systems and plans — you’re always a few quarters ahead, mapping talent needs to business goals and making sure we’re set up for what’s next.
  • Are comfortable with change and ambiguity — you know how to lead through it, prioritize, and keep the team focused on what matters most.
  • Use data to inform your decisions and aren’t afraid to challenge assumptions or adjust course when the numbers tell a different story.
Responsibilities
  • Own the strategy for our entire talent function — not just recruiting, but also employer brand, internal mobility, workforce planning, and the overall candidate experience. Your job is to connect the dots across all of it and ensure it supports where Semgrep is headed.
  • Be a trusted partner to our executive team, helping shape how we think about org design, headcount planning, and long-term hiring strategy as we scale.
  • Step into a leadership role where you can focus on the bigger picture — we already have a tenured, high-performing talent team. You’ll bring direction, structure, and thought leadership to amplify the work already in motion.
  • Bring a clear, data-informed point of view on how we attract and retain the right people. You’ll be expected to influence, not just execute.
  • Own how we show up externally — shaping our employer brand and market presence to help us stand out and attract top, mission-aligned talent.
  • Work closely with hiring managers and leaders across the business to make sure our talent bar stays high — and that our processes evolve in a way that lets us scale quickly without compromising on quality.
  • Help us build for the future by laying the groundwork for things like internal mobility, succession planning, and other programs that sit at the intersection of talent and people.

Semgrep provides a security scanning tool that helps software teams identify vulnerabilities in code before production. It works by analyzing code with Semgrep OSS and Pro Engine and integrates into developers’ workflows and ticketing systems for actionable insights. It reduces noise by using reachability analysis to cut false positives from open-source vulnerabilities by up to 98% and achieves fast scans—average under 5 minutes with a 10-second median CI scan. Its goal is to help engineering teams ship secure software faster by continuously finding and fixing vulnerabilities during the SDLC.

Company Size

201-500

Company Stage

Series D

Total Funding

$193M

Headquarters

San Francisco, California

Founded

2017

Simplify Jobs

Simplify's Take

What believers are saying

  • Menlo Ventures leads $100M Series D in February 2025 for AI expansion.
  • Cathy Polinsky hired as co-CTO in 2025 scales hybrid LLM engineering.
  • OpenAI program selection secures Snowflake, Figma, Dropbox customers.

What critics are saying

  • Snyk siphons SCA revenue via superior GitHub and IDE integrations.
  • GitHub Copilot free scanning commoditizes Semgrep within 18-24 months.
  • Microsoft AI investments embed security in Copilot, destroying standalone demand.

What makes Semgrep unique

  • Semgrep Multimodal combines AI reasoning and rule-based analysis for 8x more vulnerabilities.
  • Semgrep cuts false positives 98% with reachability analysis on third-party dependencies.
  • Semgrep delivers scans in under 5 minutes, median CI at 10 seconds.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

Paid Vacation

401(k) Retirement Plan

Professional Development Budget

Flexible Work Hours

Remote Work Options

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

2%

2 year growth

0%
The Associated Press
Mar 19th, 2026
Semgrep launches Multimodal, combining AI with rule-based analysis to find 8x more vulnerabilities

Semgrep has launched Semgrep Multimodal, a code security system combining AI reasoning with rule-based analysis for vulnerability detection, triage and remediation. The system finds up to eight times more true positives whilst cutting noise by 50% compared to foundation models alone, and has discovered dozens of zero-day vulnerabilities at customer sites. Built on Semgrep Workflows, the framework enables security teams to automate processes using deterministic tools and AI. Traditional rule-based scanners excel at catching known vulnerabilities but struggle with business logic flaws, whilst LLMs alone produce high false positive rates. Semgrep Multimodal addresses both dimensions by pairing precise programme analysis with LLM reasoning. Semgrep Multimodal is available today, with custom workflows accessible via private beta. Companies including Snowflake, Figma and Dropbox use Semgrep's platform.

Silicon Valley Journals
Feb 5th, 2025
Semgrep Raises $100M Series D Funding Round

Semgrep, a leading application security platform, has secured $100 million in Series D funding, led by Menlo Ventures with participation from existing

Semgrep
Apr 19th, 2023
Semgrep, a code & supply chain security search engine, raises Series C

Announcing our $53M Series C led by Lightspeed Venture Partners

r2c
May 11th, 2022
R2c launched DeepSemgrep for Java and Ruby on May 11th 22'.

Recognizing the value of deeper vulnerability detection, today R2c is announcing DeepSemgrep for Java and Ruby.

r2c
Oct 21st, 2021
R2c is developing Semgrep

When R2c began developing Semgrep that was its main focus, and R2c knew that lightweight static analysis, based on syntax-aware matching, would excel at enforcing secure defaults.

INACTIVE