Senior Software Engineer - CodeQL and Code Review Agents
San Francisco, United States
Github
C#
Java
JavaScript
Typescript
More jobs from this company
views: 0
Senior Software Engineer - CodeQL and Code Review Agents

GitHub is looking for a Senior Software Engineer to join one of the distributed software engineering teams responsible for building and expanding code analysis engines and agents. The role involves working in areas such as code analysis, foundations, or AI agents, based on the candidate's experience and the organization's needs at the time of hiring.

Responsibilities

  • Maintaining detection support for multiple programming languages by:
    • Building source code extractors that translate code written in each language into data that CodeQL can understand, keeping up with the latest version of each supported language
    • Writing and maintaining queries in the CodeQL query language that accurately detect security vulnerabilities and undesirable coding patterns
    • Ensuring the quality of LLM-powered Copilot Autofix suggestions for fixing the alerts found
    • Building analysis libraries in the CodeQL query language that reason precisely about the semantics of programming languages, supporting the development of queries across all languages
    • Experimenting with and robustly evaluating LLM-powered detection engines and integration between LLMs and traditional static analysis
  • Developing QL, the query language powering CodeQL analysis, and its underlying query compiler and evaluator within the CodeQL CLI
  • Expanding the expressive power of the CodeQL query language and speeding up the performance of the underlying query engine, empowering other teams to write high-quality analysis, and ensuring that CodeQL scales to the largest codebases in the world
  • Building, improving, and evaluating the detection agent for Copilot code review, using LLMs and contextual information from a codebase to produce AI-powered review comments on pull requests
  • Building, improving, and evaluating the Copilot Autofix agent, using LLMs and contextual information to produce actionable AI-powered fix suggestions for code security and quality findings
  • Improving the security and quality of code produced by GitHub's engines and other security products
  • Collaborating closely with engineering teams, product managers, designers, and technical writers to influence product direction and deliver features with a focus on quality, reliability, and user experience
  • Engaging with internal and external users, including enterprise customers and the open-source community, to help them succeed with the product
  • Providing feedback on organizational culture and processes, seeking opportunities for continuous improvement
Qualifications
  • 6+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript/TypeScript, Go, Ruby, Rust, or Python
    • OR Associate’s Degree in relevant field AND 5+ years experience in software engineering with proven production software coding experience in relevant languages
    • OR Bachelor's Degree in relevant field AND 4+ years experience in software engineering with proven production software coding experience in relevant languages
    • OR Master's Degree in relevant field AND 2+ years experience in software engineering with proven production software coding experience in relevant languages
    • OR Doctorate in relevant field
    • OR equivalent experience
  • 3+ years of experience with one or more of the following areas:
    • Software security, including static analysis, dynamic analysis, software supply chain security, and best practices in creating high-quality, secure code
    • OR Experience building developer tools that operate on source code, such as compilers, parsers, linters, static analyzers, debuggers, CLI tools, or IDE extensions
    • OR Machine learning and AI applied to understanding input
Senior Software Engineer - CodeQL and Code Review Agents
San Francisco, United States
Github
C#
Java
JavaScript
Typescript
More jobs from this company
views: 0

Be the first to know about
new jobs every week

Get 8 new jobs with salaries, once per week! Sign up here so you don't miss a single newsletter.