S

Semgrep

Static code vulnerability scanning for SDLC

Head of Field Engineering

Full-Time
$222k - $277k/yr
Expert
San Francisco, CA, USA
HybridHybrid work in the San Francisco office; travel up to 25% domestically and internationally.
Solution EngineeringPre-Sales Solution Engineering

About the job

Requirements
  • At least 7 years of experience in Solutions Engineering, Sales Engineering, Solutions Consulting, or a similar technical sales function.
  • At least 5 years of Solutions Engineering leadership experience, preferably within a high-growth or startup environment.
  • Experience leading globally distributed technical sales teams.
  • Experience managing teams that support both Commercial and complex Enterprise sales motions.
  • Proven success hiring, developing, and retaining high-performing technical sales talent.
  • Experience identifying and developing future frontline managers and senior individual contributors.
  • Strong sales acumen, including experience with pipeline management, forecasting, account strategy, capacity planning, and revenue accountability.
  • Proven success leading complex technical evaluations, proofs of value, competitive sales cycles, and executive customer engagements.
  • Strong background in cybersecurity, application security, DevSecOps, developer tooling, or adjacent technical markets.
  • Willingness to travel domestically and internationally up to 25% based on customer, team, and business needs.
Responsibilities
  • Lead, coach, and develop the global Digital Native and Enterprise Solutions Engineering teams.
  • Recruit and retain exceptional Solutions Engineering talent while building a bench of future frontline leaders.
  • Partner with Sales leadership to determine coverage, capacity, hiring priorities, and organizational design as the business grows.
  • Set clear performance expectations and create a culture of accountability, urgency, technical excellence, and continuous improvement.
  • Build the processes, playbooks, and operating rhythms needed to scale without introducing unnecessary bureaucracy.
  • Partner with Sales leadership to own technical pipeline health, deal strategy, forecast accuracy, resource allocation, and revenue outcomes.
  • Ensure the team delivers effective discovery, demonstrations, proofs of value, and executive engagement across Commercial and Enterprise opportunities.
  • Establish consistent standards for technical qualification and execution while allowing teams to adapt to customer and market needs.
  • Maintain a deep understanding of critical deals, including customer requirements, technical risks, competition, stakeholders, and path to close.
  • Step directly into strategic opportunities when leadership or technical credibility can materially improve the outcome.
  • Partner with Product, Engineering, Marketing, Customer Success, and Revenue Operations to improve the customer journey and field execution.
  • Translate customer and market feedback into clear insights that influence product strategy, positioning, enablement, and competitive differentiation.
  • Represent the Solutions Engineering organization in executive reviews, strategic planning, and leadership meetings.
  • Help define how Semgrep scales its technical sales motion across customer segments, use cases, and levels of application security maturity.
  • Establish clear metrics for technical win rates, proof-of-value conversion, sales-cycle efficiency, team capacity, performance, and customer impact.
  • Create consistent deal-review, coaching, pipeline-inspection, and forecasting cadences.
  • Improve onboarding, ramp time, enablement, and career development across a globally distributed team.
  • Build an organization that operates with repeatable, predictable excellence rather than relying on individual heroics.
Desired Qualifications
  • Experience with static analysis, code scanning, software security, or security testing tools.

About the company

Semgrep provides a security scanning tool that helps software teams identify vulnerabilities in code before production. It works by analyzing code with Semgrep OSS and Pro Engine and integrates into developers’ workflows and ticketing systems for actionable insights. It reduces noise by using reachability analysis to cut false positives from open-source vulnerabilities by up to 98% and achieves fast scans—average under 5 minutes with a 10-second median CI scan. Its goal is to help engineering teams ship secure software faster by continuously finding and fixing vulnerabilities during the SDLC.

Company Size

201-500

Company Stage

Series D

Total Funding

$193M

Headquarters

San Francisco, California

Founded

2017

Get referred to Semgrep

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Semgrep raised $100 million from Menlo Ventures in February 2025.
  • Replit expanded Semgrep integration in August 2026 across Security Center users.
  • Cathy Polinsky joined as co-CTO in May 2026 to scale engineering capacity.

What critics are saying

  • Semgrep's September 2026 outage hit UI, scanning, and API during traffic spikes.
  • August 2026 platform incidents and 97.05% observed uptime show reliability weaknesses.
  • OpenAI and Replit can replace Semgrep inside AI-native coding workflows by 2027.

What makes Semgrep unique

  • Semgrep pairs deterministic static analysis with AI reasoning, unlike pure LLM scanners.
  • Semgrep Guardian and Multimodal target AI-generated code in Replit and enterprise workflows.
  • Semgrep's OSS roots and Pro Engine give developers fast, low-noise vulnerability triage.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Paid Vacation
  • 401(k) Retirement Plan
  • Professional Development Budget
  • Flexible Work Hours
  • Remote Work Options

Growth & Insights and Company News

6 month growth

3%

1 year growth

4%

2 year growth

1%
Associated Press
Aug 11th, 2026
Semgrep and Replit deepen partnership to secure AI-generated code at scale

Semgrep has expanded its partnership with Replit to embed real-time security analysis into AI-native development workflows. The code security company has integrated Semgrep Guardian's secrets and credentials detection directly into Replit's newly launched Security Center. The collaboration addresses security challenges posed by AI-generated code, which can create and propagate vulnerabilities across multiple files in seconds. Traditional security reviews struggle to keep pace with AI agents that can scaffold complete applications in minutes. The integration provides inline security scanning, real-time vulnerability detection, and in-workflow remediation guidance. It leverages Replit Agent's LLM reasoning to filter out up to 93.3% of false positives from static analysis results. The expanded integration is now available to all Replit Security Center users with no additional setup required. Companies including Snowflake, Figma, Lyft, and Dropbox currently use Semgrep's security platform.

Yahoo Finance
May 6th, 2026
Semgrep hires Cathy Polinsky as co-CTO to tackle AI-generated code security challenges

Semgrep, a code security company, has appointed Cathy Polinsky as co-CTO and VP of engineering. Polinsky brings over 20 years of engineering leadership experience from Yahoo, Salesforce, Stitch Fix, Shopify and DataGrail, including two previous CTO roles. The hire comes as AI-generated code increasingly floods enterprise codebases. Semgrep was recently selected as one of four companies for OpenAI's Trusted Access for Cyber programme. Polinsky will oversee the entire engineering organisation, including product engineering, security research and technical support. She joins co-founder and co-CTO Drew Dennison in a dual structure where Dennison leads technical vision and AI strategy whilst Polinsky scales the engineering team. Polinsky will also oversee development of Semgrep's hybrid LLM offering, which combines static analysis with AI models to detect vulnerabilities.

Associated Press
Mar 19th, 2026
Semgrep launches Multimodal, combining AI with rule-based analysis to find 8x more vulnerabilities

Semgrep has launched Semgrep Multimodal, a code security system combining AI reasoning with rule-based analysis for vulnerability detection, triage and remediation. The system finds up to eight times more true positives whilst cutting noise by 50% compared to foundation models alone, and has discovered dozens of zero-day vulnerabilities at customer sites. Built on Semgrep Workflows, the framework enables security teams to automate processes using deterministic tools and AI. Traditional rule-based scanners excel at catching known vulnerabilities but struggle with business logic flaws, whilst LLMs alone produce high false positive rates. Semgrep Multimodal addresses both dimensions by pairing precise programme analysis with LLM reasoning. Semgrep Multimodal is available today, with custom workflows accessible via private beta. Companies including Snowflake, Figma and Dropbox use Semgrep's platform.

SVJ Media Ltd.
Feb 5th, 2025
Semgrep Raises $100M Series D Funding Round

Semgrep, a leading application security platform, has secured $100 million in Series D funding, led by Menlo Ventures with participation from existing

Semgrep
Apr 19th, 2023
Semgrep, a code & supply chain security search engine, raises Series C

Announcing our $53M Series C led by Lightspeed Venture Partners