Senior Engineering Manager, Software Supply Chain Security

About the Role

Lead Semgrep's supply chain security team, building customer-facing tools that help developers identify and remediate genuinely exploitable vulnerabilities in their dependencies. You'll mentor engineers, collaborate across product and design, architect data systems, and guide users toward clearer security visibility—cutting through the noise of false positives to focus on the 20% of vulnerabilities that actually matter.

Responsibilities

• Partner with product and design to establish a roadmap balancing iterative improvements and strategic bets
• Prioritize team workload, managing the tension between new feature development and technical quality
• Coach and mentor engineers through feedback cycles, performance reviews, and growth conversations
• Cultivate a team environment that encourages creativity, calculated risk-taking, and ownership
• Expand the team by recruiting diverse, high-performing engineering talent
• Define weekly and quarterly goals aligned with the team's strategic vision
• Contribute directly to technical work on new features and maintain hands-on understanding of team projects

Requirements

• 3+ years managing software engineering teams
• Proven experience shipping products to production through multi-disciplinary engineering (design, iterative milestones, customer feedback loops)
• Working knowledge of agile development and milestone-based delivery
• Strong commitment to coaching and mentoring engineers and peer leaders
• Experience with Software Composition Analysis, prior security product development, or background in developer tooling

Benefits

• Base salary range: $197,000–$288,000 (determined by skills, experience, location, and market data)
• Equity as a meaningful component of total compensation
• Competitive, market-aligned benefits program meeting or exceeding local standards across hiring regions
• Hybrid arrangement: 3 days/week in San Francisco or New York office

Location & Work Arrangement

San Francisco, Boston, New York, or Denver. This role requires 3 days per week in either the San Francisco or New York office. For US-based remote eligibility, Semgrep currently hires in: Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Illinois, Maryland, Massachusetts, Michigan, Missouri, Nebraska, New Jersey, New York, North Carolina, Oregon, Tennessee, Texas, Virginia, Washington, and Wisconsin.