Full-Time

Agent Engineer

Updated on 7/28/2026

Sourcegraph

Sourcegraph

51-200 employees

AI-assisted code search, refactoring, and fixes

No salary listed

Remote in USA

Remote

Remote role; must overlap with Eastern Time for at least 20 hours/week.

Category
Software Engineering (1)
Required Skills
Machine Learning
Postgres
GraphQL
Docker
TypeScript
Go

Get referred to Sourcegraph

Find people who can refer or advise you

Requirements
  • You are a senior engineer and technical leader with hard-won skills in agent engineering - a blend of software engineering, machine learning, and statistics.
  • You have real agent engineering depth. You think naturally in terms of datasets, evals, baselines, metrics, and error analysis, and you know how to tell whether a change actually made things better.
  • You build with agents, fluently and opinionatedly. You have designed multi-step agentic systems and made them reliable, observable, and cost-bounded.
  • You are pragmatic about evaluations and conscious of cost. You know where evaluations earn their keep and where they mislead. You reach for lightweight smoke tests and real-world feedback first, and you hold cost and latency as product constraints, not afterthoughts.
  • You operate autonomously on ambiguous problems. Given a rough product idea, a few customer quotes, and a Slack thread, you come back with a plan, a prototype, milestones, and a point of view on tradeoffs, without it being pre-scoped.
  • You contribute beyond your domain. As a senior IC, you go into whatever part of the codebase a problem requires, recognize issues beyond your immediate area, and translate between engineering goals and business objectives.
  • You up-level the people around you. You mentor by pairing on hard problems, providing substantive design and code reviews, and spreading agent engineering literacy across the team.
  • You're customer and product-driven. You're comfortable on customer calls and in feedback threads, you turn raw signals into requirements, scopes, and milestones, and you push back when feedback would lead the product astray.
  • You're pragmatic, not a perfectionist. You ship the smallest correct thing, prefer robust solutions over complicated ones, and keep a high-quality bar with simplicity.
  • On the engineering fundamentals: You're a strong software engineer who can ship production services.
  • You're comfortable across our stack - Go on the backend, TypeScript on the frontend, GraphQL, Postgres, Docker - or you're clearly able and eager to get there.
  • You're fluent with agentic coding tools, and you understand and own every line it submits.
  • You're comfortable in an async-first, multi-service, fast-paced remote environment.
Responsibilities
  • Agentic systems. You'll design and harden the multi-step, tool-using agent loops behind current and new agentic experiences, turning research and experiments into reliable, observable, and affordable products at enterprise scale.
  • Pragmatic use of evaluations. Crafting agentic products means needing to tell when a change actually helped, which is hard when agents keep changing and the product keeps shifting. You'll bring judgment about where evaluations earn their keep, when to use targeted smoke tests and metrics, and how to avoid noise dressed up as rigor, so we can move fast with confidence.
  • Models: selection, upgrading, and training. You'll decide which models we run where, drive upgrades, and fine-tune our own when that's the right call.
  • Retrieval and context engineering. You'll push on how we ground models in a customer's code - retrieval, ranking, context windows, citations - to make answers more accurate and verifiable.
  • Cost and latency. Every surface has a per-user economic budget. You'll treat cost and latency as product features, and profile, distill, cache, and right-size models so we can ship ambitious features sustainably.
Desired Qualifications
  • You've shipped an LLM-powered or agentic developer-facing product you can speak about opinionatedly: what worked, what didn't, and what you'd do differently.
  • You've built evaluation systems for LLM or ML products.
  • You've fine-tuned, distilled, or trained models to meet cost, latency, or quality targets in production.
  • Experience with retrieval, ranking, embeddings, or search relevance.
  • Experience working directly with enterprise customers and translating their needs into a product.
  • Experience mentoring or up-leveling engineers, especially raising a team's agent engineering fluency.

Sourcegraph is a code intelligence platform that helps developers understand, navigate, and improve large codebases. It provides code search, navigation, bug fixing, refactoring, and performance optimization in one interface, plus an AI assistant named Cody to answer questions and automate tasks by indexing code across repositories. Its strength comes from supporting enterprise-scale code understanding with fast, precise searches over multilingual repositories, strong security and governance, and seamless integration into existing workflows. The goal is to boost engineering velocity, improve software quality, and increase team efficiency by making code easier to explore, reuse, and maintain.

Company Size

51-200

Company Stage

Series D

Total Funding

$223M

Headquarters

San Francisco, California

Founded

2013

Get referred to Sourcegraph

Find people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Palo Alto Networks achieved 30% higher development velocity and reduced onboarding from months to weeks.
  • Cody 5.1 supports multi-repository context and automation recipes for complex tasks like test generation.
  • Sourcegraph outperforms GitHub search for uncovering deleted secrets via historical commit analysis.

What critics are saying

  • Reputational collapse from 2023 token leak exposing 1.8M developers' license keys and emails.
  • Shadow AI data leakage via Cody chat inputs exposing client secrets in enterprise environments.
  • Agentic Batch Changes may fail catastrophically in large codebases causing thousands of failed runs.

What makes Sourcegraph unique

  • Sourcegraph uniquely enables regex, structural search, and historical commit analysis for security auditing.
  • Cody 5.1 provides autocomplete based on entire repository context using embeddings-based semantic search.
  • Agentic Batch Changes automates large-scale code updates across thousands of repositories with validation.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Work fully remote

Unlimited PTO

Generous travel budgets

Competitive pay + equity

Medical, dental, & vision

Professional development

Office budget

Wellness budget

Family planning benefits

Growth & Insights and Company News

Headcount

6 month growth

-3%

1 year growth

0%

2 year growth

0%
SecurifyAI
Apr 9th, 2026
Mastering Sourcegraph for Bug Bounty: Advanced Code Dorking Techniques.

Mastering Sourcegraph for Bug Bounty: Advanced Code Dorking Techniques. April 9, 2026 Key Takeaways What security researchers should know immediately. * Sourcegraph outperforms GitHub search for security auditing, especially across large repositories and complex code patterns. * Regex, structural search, and Boolean logic help bug bounty hunters uncover hidden vulnerabilities faster. * Historical commit analysis is a major advantage, making it easier to find deleted secrets and legacy exposures. * Targeted query construction reduces noise, improving signal quality during bug hunting and reconnaissance. * Security teams can shift left more effectively by combining code intelligence with proactive application security workflows. Navigate This Article Table of contents. For security researchers and bug bounty hunters, speed and accuracy are everything. While GitHub is the home of open source, its native search functionality often falls short when you need to dig deep into commit histories or filter through massive repositories for specific vulnerabilities. At SecurifyAI, Securify enable tools that allow Securify to "shift left" and catch bugs faster. In this post, Securify explore why Sourcegraph is a superior alternative to GitHub search for security auditing and how you can use it to uncover hidden risks across large codebases. As part of Mastering Sourcegraph for Bug Bounty: Advanced Code Dorking Techniques, Securify demonstrate how security researchers can leverage powerful regex searches, code intelligence, and large-scale repository analysis to identify vulnerabilities faster and more accurately. The problem with standard GitHub search. If you have ever tried to grep through a massive organization's repository on GitHub, you know the pain: * Speed: GitHub's search often slows down on big repositories. * Depth: It is primarily optimized for basic file and text lookups, often missing complex patterns. * Scope: GitHub usually prohibits cross-repo searches unless you pay for "Advanced Security," and it searches the latest branch rather than the entire history. Why Securify use Sourcegraph for security Dorking. Sourcegraph is a code intelligence platform. It indexes and analyzes code to provide blazing-fast, accurate searches. Here is why it is a game-changer for bug hunting: 1. Regex and Structural Search. Sourcegraph supports Regular Expressions (Regex) and Structural Search. This allows you to search for code patterns rather than just variable names. 2. Boolean operators. You can use AND, OR, and NOT operators for precise filtering. * Example: lang:go auth AND NOT encryption allows you to find authentication code that lacks encryption methods. 3. Historical analysis. Sourcegraph looks through all of the commit histories, not just the current codebase, unlike regular search. This is very important for finding "deleted" credentials or vulnerabilities that are still in history. Tutorial: how to dork for bugs (with demos). Let's look at a real-world workflow using Sourcegraph to find sensitive data. When hunting for secrets, Securify look for specific high-value targets. Common keywords include: * password / pw * AKIA / ASIA (AWS Keys) * clientsecret Step 2: constructing a complex query. Let's say Securify want to find exposed credentials in Python files related to service-now.com, but Securify want to filter out test files to avoid false positives. The Query: service-now.com AND (Passwd OR password OR PW) NOT example NOT test NOT server.service-now lang:python Breakdown of this command: * service-now.com: Restricts results to this specific domain. * AND (Passwd OR...): Targets potential credentials. * NOT example...: Removes dummy data and test servers to ensure the find is legitimate. * lang:python: Limits the search to Python scripts. Step 3: analyzing results. When you run this query, Sourcegraph returns results instantly. In its test case, it returned 87 results in 0.385 seconds. You can immediately see the context. For example, a result might show a requests.post call including auth=(user, pwd), revealing hardcoded "admin" credentials. Comparison: Sourcegraph vs. GitHub search. Conclusion. For developers and security professionals, the ability to "Google" your codebase effectively is a superpower. By moving beyond basic text search and utilizing the structural and regex capabilities of Sourcegraph, you can secure your applications more constructively. To strengthen this process further, teams often combine code search workflows with application security, cloud security, and VAPT services.

Amazon Web Services
Mar 5th, 2026
Palo Alto Networks Accelerates Software Development Using Generative AI with Sourcegraph and Anthropic

Palo Alto Networks accelerates software development using Generative AI with Sourcegraph and Anthropic. 7月 02, 2025 Amazon Web Services. Palo Alto Networks is redefining how software is built in high-stakes industries. In a landscape where outside parties have access to generative AI, speed and precision make all the difference. By harnessing cutting-edge technology from Amazon Web Services (AWS), Palo Alto Networks accelerated its development process and reinforced its commitment to delivering secure, high-quality solutions to its customers. Opportunity | Keeping Pace with Evolving Cyber Threats When you're on the front lines of cybersecurity, standing still isn't an option. Palo Alto Networks, a global leader in cybersecurity, understands that protecting customers against ever-evolving threats is mission critical. To meet this challenge, the company launched an innovative initiative working alongside AWS as well as AWS Partner Anthropic and AWS Partner Sourcegraph to accelerate software development without compromising security. "Bad actors also have access to AI, so we need to stay ahead of them," says Gunjan Patel, director of engineering at Palo Alto Networks. "With AI, they can potentially accelerate their activities, so the good guys need to move faster to keep them in check." Solution | Harnessing Generative AI to Empower Developers Using Amazon Bedrock - the easiest way to build and scale generative AI applications with foundation models - the team securely integrated Anthropic's models into internal workflows. This brought the power of natural language directly into the integrated development environment. Sourcegraph helped weave generative AI capabilities - like debugging, rearchitecting, and writing test cases - into developers' daily routines. This enhanced Palo Alto Networks' productivity without forcing context switching or compromising security. Additionally, it empowered new hires to ramp up faster and helped experienced engineers to focus more on strategic work. "None of the off-the-shelf products were right for us," says Patel. "We needed some sort of customization so that our source code was secured without compromising on any state-of-the-art AI technology. With this solution from AWS, Anthropic, and Sourcegraph, we are bringing access to state-of-the-art cloud models directly into developers' environments." Outcome | Accelerating Development by 30 Percent While Safeguarding Security The impact has been immediate. The company has seen a 30 percent increase in development velocity and has cut onboarding time for new engineers from months to weeks. Today, more than 2,500 developers are already using the generative AI solution, with plans to expand this to 3,500. Developers now work alongside intelligent AI models that act like collaborative teammates, helping them move faster while maintaining the trust and security its customers expect. Harnessing the power of generative AI, Palo Alto Networks modernized its engineering environment. The result is a solution that helps developers enhance their productivity while sustaining the highest security standards. customer-stories generative-ai-trailblazers

VentureBeat
Dec 23rd, 2024
The Code Whisperer: How Anthropic’S Claude Is Changing The Game For Software Developers

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More. The software development world is experiencing its biggest transformation since the advent of open-source coding. Artificial intelligence assistants, once viewed with skepticism by professional developers, have become indispensable tools in the $736.96 billion global software development market. One of the products leading this seismic shift is Anthropic’s Claude.Claude is an AI model that has captured the attention of developers worldwide and sparked a fierce battle among tech giants for dominance in AI-powered coding. Claude’s adoption has skyrocketed this year, with the company telling VentureBeat its coding-related revenue surged 1,000% over just the last three months.Software development now accounts for more than 10% of all Claude interactions, making it the model’s most popular use case

DevOps.com
Dec 14th, 2023
Sourcegraph Launches Cody Generative AI Tool to Write Code

Sourcegraph today made generally available an open source Cody tool that leverages generative artificial intelligence (AI) tools to write and fix code.

PR Newswire
Sep 7th, 2023
Introducing Ironclad Contract Ai, A Paradigm Shift For Contract Analysis

Also known as Ironclad CAI, the product allows teams across the organization to generate complex contract analysis and data visualizations using an AI-powered chat interfaceSAN FRANCISCO, Sept. 7, 2023 /PRNewswire/ -- Today, Ironclad , the leading digital contracting platform for modern legal teams, announced the beta launch of Ironclad Contract AI (CAI), a first-of-its-kind product that allows users to complete complex contract analysis across their contract database through an easy-to-use chat interface. The product introduces to the market the use of AI agents to handle complex multi-step analyses by breaking down tasks into subtasks, completing those subtasks, and then evaluating the results to inform the next set of tasks, and is the only legal product that allows users to see the exact steps it took to come to a certain conclusion."Ironclad Contract AI is a quantum leap for contracts," said Ironclad CEO and co-founder Jason Boehmig. "The most legal chatbots have been able to do is return a raw list of results, which still require in-depth analysis by a lawyer. CAI is able to comb through a corpus of contracts and actually do the reasoning required to answer almost any contract-related question—showing you the steps it took to reach that conclusion—and handing that analysis back to your legal team. Where most generative AI is a black box, CAI is an open book."Ironclad CAI helps teams in any organization locate and analyze contracts faster by simply describing the contracts needed or asking questions—without needing filters, advanced keyword logic, or even training