Senior Software Engineer - Code Scanning Language Coverage

GitHub is the home for software development, where we collaborate to build the world's leading AI-powered developer platform.

In the Code Scanning organization at GitHub, we are passionate about ensuring the security and quality of the world’s software - from open source to the enterprise, written by humans and by AI tools. We believe that the best way to secure and improve the quality of software is to detect actionable issues early in the development process, and actively facilitate their remediation as part of the developer workflow.

Our team develops detection and remediation engines that power several GitHub products used by hundreds of thousands of developers and projects every day:

• CodeQL is GitHub's semantic code analysis engine that uses world-class static analysis research and technology to deeply analyze code, enabling the early detection of security vulnerabilities and correctness errors in software. CodeQL supports a wide range of programming languages, including C/C++, C#, Go, Java, JavaScript/TypeScript, Kotlin, Python, Ruby, and Swift. It is used as the primary detection engine within the GitHub Code Security and GitHub Advanced Security products.

We work as a distributed group within a distributed company. The majority of our team members live across Europe, the US, and Canada, and while we do have some offices, all our meetings are location-agnostic and happen online. We operate with a high degree of autonomy and trust, and we have a significant level of influence on the product and technical direction of security and code review products at GitHub. We value learning, introspection and reflection, and we’re always looking for ways to improve as a team and as individuals, so candor and a culture that values safety to speak up are highly important to us. 

We are looking for a Senior Software Engineer to join the Code Scanning Language Coverage team. The team’s work is organized around three pillars:

• Maintain and expand Code Scanning's language coverage by supporting new language standards and versions and adding new languages, enabling more developers to identify security vulnerabilities in their code.
• Partner with Product to expand Code Scanning’s capabilities while reducing long-term maintenance costs through scalable, cross-language solutions.
• Unify the technology stack and analysis capabilities across languages, creating a scalable foundation for expanding product capabilities through AI and supporting AI-powered vulnerability detection in real time.

In any of the above tracks, you will work closely with various engineering teams, product managers, designers, and technical writers that build different aspects of the code scanning product, to influence product direction and deliver features to users, with clear focus on quality, reliability, and user experience. You will engage with internal users and external users (both from enterprise customers and the open-source community) to help them succeed with the product.

You’ll influence and provide feedback on the organizational culture and processes, always looking for opportunities to improve in a continuous pursuit of excellence.