Details zum Jobangebot
As the global home for all developers, GitHub is the complete AI-powered developer platform to build, scale, and deliver secure software. Over 100 million people, including developers from 90 of the Fortune 100 companies, use GitHub to build amazing things together across 330+ million repositories. With all the collaborative features of GitHub, it has never been easier for individuals and teams to write faster, better code.
Locations
In this role you can work from Remote, United Kingdom
Overview
GitHub is the home for software development, where we collaborate to build the world's leading developer platform.
In the GitHub code scanning team, we are passionate about securing the world’s software - from open source to the enterprise. We believe that the best way to secure software is to detect security issues early in the development process, and deliver a great user experience that engages, supports, and motivates developers to fix security vulnerabilities in a way that integrates naturally in their workflows.
Our team develops and operates the code scanning product that’s part of GitHub’s Advanced Security offering. A central part of code scanning is CodeQL, GitHub's own semantic code analysis engine that uses world-class static analysis research and technology to deeply analyze code, enabling the early detection of security vulnerabilities and correctness errors in software. CodeQL currently supports a wide range of programming languages, including C/C++, C#, Go, Java, JavaScript/TypeScript, Kotlin, Python, Ruby, and Swift.
Come join one of the distributed engineering teams responsible for building and expanding the code analysis capabilities of CodeQL, used by hundreds of thousands of developers and projects every day. In this role, you will continuously innovate to expand the core capabilities of CodeQL in one of the following tracks:
Responsibilities
Security research
- In this track, you will work primarily on the CodeQL default queries and analysis libraries, as part of a CodeQL language analysis team.
- You will write queries in the CodeQL query language to detect new security vulnerabilities with high precision, reduce the false negative rate of the existing analysis by building models of widely-used libraries and frameworks, and contribute your expert security knowledge to refine the LLM-powered autofix capabilities included in GitHub code scanning for alerts produced by CodeQL.
- In this track, you will work primarily on the CodeQL default queries, analysis libraries, and CodeQL extractors that process source code, as part of a CodeQL language analysis team.
- You will ensure CodeQL works well across a wide variety of programming language versions, operating systems, build systems, and customer environments. You will build and maintain analysis libraries in the CodeQL query language that reason precisely about the semantics of programs in multiple supported languages.
- In this track, you will be part of the CodeQL Foundations team, and work primarily on QL, the query language powering CodeQL analysis, and its underlying query compiler and evaluator within the CodeQL CLI.
- You will expand the expressive power of the CodeQL query language and speed up the performance of the underlying query engine, empowering the other CodeQL teams to write high-quality analysis that scales to the largest codebases in the world.
- In this track, you will be part of the CodeQL Experiences team, and work primarily on the CodeQL CLI, the CodeQL Action, the CodeQL extension for Visual Studio Code, GitHub backend services and APIs, and AI-powered autofix and threat modeling capabilities.
- You will work on integrating CodeQL as a code scanning tool into GitHub Actions, third-party CI systems, the command line, and the IDE. You will be responsible for shipping and monitoring CodeQL in production, and making its analysis even more powerful through AI-powered autofix suggestions and elegant mechanisms for customization and threat modeling.
Your application will be considered for each of the tracks above, based on your own experience and the availability of roles on our teams.
Qualifications
Minimum Qualifications:
For this role, we’re looking for an experienced software engineer with:
- A few years of experience in software engineering or security research, with a high level of familiarity with Java, JavaScript/TypeScript, C++, C#, Rust, or a comparable programming language, and the interest and ability to learn additional languages as required
- Software security, including static analysis, dynamic analysis, software supply chain security, or best practices in application security
- Experience building developer tools that operate on source code, such as compilers, parsers, static analyzers, debuggers, CLI tools, or IDE extensions
- Knowledge of compilers, program analysis, programming language design and implementation advanced knowledge of logic programming or database query languages (e.g. SQL, Prolog, Datalog, Kusto Query Language)
- Building integrations with CI/CD systems, such as GitHub Actions or Jenkins
- Machine learning applied to understanding source code, specifically using prompt engineering with large language models (LLMs) and systematic data collection and result evaluation
- Experience with the C++, Python, Go, Ruby, or Swift programming languages
Strong applicants will also have:
- The ability to work with multiple stakeholders and teams across engineering, product, and design
- Experience operating user-facing software at scale, including availability and observability
- Experience working in a distributed team, operating effectively across multiple time zones (our teams span a wide time zone range from Pacific time to Central European time)
- A passion for fostering good engineering practices, tools, and processes
- Customer-obsessed
- Ship to learn
- Growth mindset
- Own the outcome
- Better together
- Diverse and inclusive
- Model
- Coach
- Care
- Create clarity
- Generate energy
- Deliver success
GitHub is the world’s leading AI-powered developer platform with 100 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.
Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are—because we know that people flourish when they can work on their own terms.
Join us, and let’s change the world, together.