Vacancy expired!
Senior Software Engineer - Compilers and Static Code Analysis
Job Description:Senior Software Engineer - Compilers and Static Code AnalysisFortify is the industry-leading provider of Application Security solutions that empowers organizations to develop secure software. Fortify offers a comprehensive portfolio of application security solutions with the flexibility of testing on-premise and on-demand to cover the entire software development lifecycle. Over 80% of security breaches exploit application vulnerabilities, and at Fortify, you will be at the forefront of one of the fastest growing segments in the security market. You will work with bright, motivated teammates to implement solutions to some of the toughest code analysis problems in the industry. We develop complex algorithms to scan the code of over 25 different programming languages. Development and testing are done using agile methodologies and techniques. US Citizenship is required.Join us and you will:- Design and implement static analysis algorithms for Fortify's Static Code Analyzer (SCA) product.
- Develop new analysis features and add support for new language and language features.
- Apply recent research developments from computer science literature where we can benefit from upgrading our algorithms and program representations.
- Evaluate analysis results for false positives / false negatives, and propose and implement improvements achievable with low computational cost.
- Investigate and address product performance and memory usage, which are critical for scanning our customers' largest codebases.
- Collaborate with other frontend and backend software engineers and the security research team to ensure SCA delivers reliable, cost effective, high-quality solutions.
- Master's degree or Ph.D. (preferred) in Computer Science or equivalent, with emphasis on programming languages, static program analysis, compilers, or software security.
- Static analysis algorithms (abstract interpretation, dataflow, higher order analysis, buffer analysis, shape analysis, separation logic, context-insensitive incremental analysis).
- Compiler construction (frontends, IR, type inference, program transformations) in one or more programming languages (Java, C/C, Javascript, Rust, Swift, Go, Scala, Kotlin, PHP, Python, C#/.NET, etc.).
- Large-scale software development in Java, with emphasis on code quality, including performance and memory usage.
- Good software engineering practices (documentation, tests, code review, modularity, optimization) applied to both new code and maintenance of existing code.
- Strong analytical and problem solving skills, with persistence and attention to detail
- Debugging complex issues, including correctness, performance, and non-determinism bugs
- Excellent verbal and written communication skills (discussion and articulation of product architecture, design proposals, and specifications; team collaboration; software documentation)
- Compiler tools (LLVM, MLIR, Rust HIR/MIR, Eclipse JDT, etc.)
- Frameworks and multi-language systems (Angular, NodeJS, VueJS, React, Flask, JSP, Go HTML templates, etc.)
- Build systems (make, cmake, gradle, ant, mvn, msbuild, sbt, buck)
- Multi-platform software development
- Passionate about software security
- Attentive to software quality
- Collaborative and a team-player
- Able to take ownership of problems
- Inventive, adaptable, and a self-starter
Vacancy expired!