VerifyRemote
Semgrep logo

Semgrep

semgrep.devCybersecurityUnited States51-200 employeesFounded 2017

About

Semgrep is a remote-friendly company building fast static analysis to find and fix code security issues.

Reviews (5)

2.2 average
Interview experience

Mixed — interviewees were divided on their experience.

Neutral (2)Negative (1)Didn't interview (1)
What people like
  • “great equipment stipend, great health benefits”
  • “great equipment stipend, fully remote, no RTO games, great health benefits”
  • “fully remote, no RTO games, stock that's actually worth something”
What to watch for
  • “weak onboarding, RTO creep, bureaucratic”
  • “burnout is common, unclear expectations”
  • “limited upward mobility, RTO creep”

Burned out fast

tbh Pay sat below market and they wouldn't budge at review time. Burned out within a year, and I wasn't the only one.

Cons

weak onboarding, RTO creep, bureaucratic

Interview experience: Negative
TK
Tyler Kowalski
over 1 year ago
Contract

would not recommend

Way too many meetings, almost no time to actually build. Pay sat below market and they wouldn't budge at review time.

Pros

great equipment stipend, great health benefits

Cons

burnout is common, unclear expectations

TK
Theo Kowalski
almost 2 years ago
Full-time

Be careful

Honestly, Way too many meetings, almost no time to actually build. Way too many meetings, almost no time to actually build. Comp is competitive and the equity refresh was actually real

Pros

great equipment stipend, fully remote, no RTO games, great health benefits

Cons

limited upward mobility, RTO creep

Interview experience: Neutral
L
Lucas
about 2 years ago
Freelance

would recommend

Flexible hours mean I actually get to see my kids at dinner.

Pros

fully remote, no RTO games, stock that's actually worth something

Cons

too many meetings

Interview experience: Didn't interview
JH
Jordan Haddad
about 2 years ago
Part-time

Lots of red flags

Overall, Promised growth that just never materialized.

Pros

fully remote, no RTO games, clear promo path

Cons

roadmap changes weekly

Interview experience: Neutral
TH
Tanya Hassan
about 2 years ago
Former employee

Related companies

ZI

ZeroThreat Inc.

zerothreat.ai

50
Trust

ZeroThreat Inc. is an AI-driven cybersecurity innovator dedicated to transforming how modern enterprises protect their web applications and APIs through its advanced platform. We empower organizations, from fast-growing startups to global enterprises, to stay ahead of evolving threats by delivering continuous, attacker-style penetration testing at the speed of modern development. Our mission is to eliminate the noise and complexity of traditional application security. By pioneering an Agentic AI engine and automated penetration testing platform, ZeroThreat.ai enables security teams to automate complex manual processes, reducing manual pentesting effort by 90% while achieving a 99.9% accuracy rate. It doesn't just scan for vulnerabilities. It validates real-world attack paths and provides audit-ready evidence, ensuring that organizations in highly regulated sectors such as Fintech, Healthcare, and Government can scale securely and maintain compliance. ZeroThreat.ai bridges the gap between developers and security teams by providing proof-based findings and actionable remediation guidance. We are committed to restoring developer trust through non-destructive, intelligent validation that focuses exclusively on exploitable risks, allowing businesses to ship software up to 10x faster without compromising security.

VerifiedCybersecurityUnited States
Cloudflare logo

Cloudflare

cloudflare.com

48
Trust

Cloudflare runs a global network that helps build, secure and accelerate anything you connect to the internet.

VerifiedCybersecurityUnited States
1Password logo

1Password

1password.com

48
Trust

1Password is a remote-first company building a password manager and security platform trusted by millions of people and businesses.

VerifiedCybersecurityCanada
CrowdStrike logo

CrowdStrike

crowdstrike.com

47
Trust

CrowdStrike delivers cloud-native endpoint and cloud workload protection to stop breaches.

VerifiedCybersecurityUnited States