Security Researcher Intern

About The Role

As a Security Researcher Intern at Semgrep, you will join a team that is incredibly curious, motivated, and collaborative. You will gain broad exposure to our security research and security efforts, working on projects that span multiple security and engineering disciplines. This may include vulnerability research, writing Semgrep rules, engineering improvements to our production environment, or making changes to our rule templates.

During your internship, you will work closely with a dedicated group of security researchers, program analysis experts, and product engineers. You will learn from senior security professionals who bring experience and wisdom from decades of working in-house to secure organizations like Google, Facebook, and successful startups. You’ll be part of a larger intern cohort that is spread out across various teams in engineering. You’ll attend lunch and learn sessions across the company, learning about everything from the relative strengths and weaknesses of different development languages to the best ways to secure modern cloud infrastructure. You’ll get to use Semgrep and work to improve the product experience for our customers.

Responsibilities

• Participate in our Security Research operations program.
• Triage new vulnerabilities and probe deeply into the source code to write Semgrep rules.
• Conduct research and generate patterns to identify specific CVEs in our customers' code.
• Engineer improvements to our rule production pipeline, infrastructure, and rule writing tools.
• Develop impactful ways to improve rule writing efficiency, such as through automations, integrations with AI, or templates.
• Collaborate with other Security Researchers at Semgrep to complete projects and tasks.
• Present your work to the Semgrep team at the end of your internship.

Ideal Candidate

• Interested in building a career in Security or Security Research.
• Curious to learn about vulnerabilities.
• Eager to gain experience with a broader range of languages.
• Experienced with scripting in one or more well-used languages: Python, Go, etc.
• Able to work in our San Francisco office.
• Available to start your internship on May 27th, 2025, or June 23rd, 2025.

A Day in the Life

A typical day might involve conducting research for vulnerabilities in multiple languages, working with the Security Research team to design and implement improvements to our tooling, helping to debug and fix errors in our infrastructure, and reviewing and writing code to add a feature in our rule writing pipeline.

What We Offer

• $2,400 per week for our 10-week full-time internship.
• Close 1:1 mentorship from full-time engineers on the team.
• Regular feedback from your team’s manager.
• The opportunity to work in-person in our San Francisco office.
• An intern cohort of peers.

Our goal is to competitively and fairly compensate every Semgrep employee with a system that equally rewards those who are vocal and those who are less comfortable making demands during the final steps of the hiring process. We update our compensation bands based on market data to ensure they’re above the average for comparable roles.

We also invest in our employees’ well-being and long-term success with comprehensive health plans, generous vacation time, 401k, learning stipends, and more. Our benefits are for everyone, so that you’re taken care of, and we work with individuals to make sure they have what they need, whether that’s quiet work space, adjusted hours, or something else.