RefolkCandidates
Open nowLegalLegal

Corporate Counsel

Semgrep · San Francisco, United States

Location
San Francisco, United States
Workplace
Hybrid
Employment
Full time
Level
Mid level
Posted
2 months ago

About this role

About Semgrep

Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it’s written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog.


Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Vanta, Lyft, and Dropbox. Learn more at semgrep.dev.

About the Role

Semgrep is hiring a Corporate Counsel to be an integral part of the company's legal function during a pivotal stage of growth.

This role will own and drive commercial transactions across the business, partnering closely with stakeholders to support a fast-moving, highly technical organization. This role will report to the COO and work closely with Semgrep’s Fractional General Counsel and the Legal Innovation and Contracts Manager to build scalable legal processes, improve contracting velocity, and shape how legal supports the business as the company grows.

The ideal candidate is excited to work at the forefront of AI-native software development and will leverage AI and automation thoughtfully to improve legal workflows, contracting efficiency, and legal operations.

The right person takes ownership, is highly responsive, business-minded, and comfortable operating independently.

What You’ll Do

  • Lead negotiation and execution of customer and vendor agreements, including SaaS agreements, MSAs, DPAs, NDAs, procurement agreements, and related commercial contracts.

  • Serve as a practical, solutions-oriented advisor to internal stakeholders, balancing legal risk with business priorities.

  • Help define how commercial legal operates at Semgrep, including contracting workflows, templates, playbooks, and approval processes.

  • Evaluate and implement practical uses of AI within legal workflows, including contract review, playbook development, knowledge management, and process automation.

  • Advise internal teams on legal issues related to SaaS, data privacy, data security, AI, and intellectual property.

  • Support Product, Security, and Engineering teams on customer-facing legal and compliance considerations.

  • Stay current on evolving legal and regulatory developments affecting AI, developer tools, cybersecurity, and open-source software.

  • Build strong cross-functional relationships and become a trusted advisor across the organization.

  • Bring a generalist mindset and the ability to flex across legal disciplines as needed.

You’re a Good Fit If You

  • J.D. and active membership in at least one U.S. state bar, with a preference to practice law in California.

  • 3-6 years of legal experience with a mix of law firm and in-house, preferably in a high-growth SaaS or technology company.

  • Understand legal issues related to data privacy, data security, software development, AI, and intellectual property.

  • Experience in developer tools, cybersecurity, infrastructure software, IP, and open-source software

  • Self-starter, solutions-oriented, problem solver, not a task manager, and comfortable operating independently while taking ownership of outcomes and driving agreements to execution.

  • Highly responsive, moves swiftly, curious, and communicates clearly.

  • Have strong business judgment and provide pragmatic, actionable guidance in fast-moving environments.

  • Enjoy building processes and improving systems rather than simply maintaining them.

  • A history of implementing AI-based processes and legal technology is strongly preferred.

  • Are naturally intellectually curious, thoughtful, and detail-oriented

  • Thrive in environments with ambiguity, rapid growth, and evolving priorities.

  • Comfortable operating in a fast-moving organization and partnering cross-functionally to support the company’s fast growth while managing risk.

Why This Role

  • Opportunity to help shape the legal function at a category-defining code security for builders company.

  • Direct partnership with a fractional general counsel and company leadership.

  • Meaningful ownership and autonomy from day one.

  • Exposure to cutting-edge legal issues at the intersection of AI, security, and developer tools.

  • Collaborative, thoughtful, and high-agency culture.

What we offer (FTE only)

Our goal is to competitively and fairly compensate every Semgrep employee with a system that equally rewards those who are vocal and those who are less comfortable making demands during the final steps of the hiring process. To that end, we generate internal compensation bands that are used when discussing and negotiating salaries. We update these based on market data to make sure they’re above the average for comparable roles.

We invest in our employees’ well-being and long-term success through a competitive, market-aligned benefits program that meets or exceeds local market standards across all of the regions in which we hire. Benefits offerings vary by location to reflect local requirements and norms. For more detailed, location-specific information, please visit Semgrep Benefits.

Who we are

We bring together people from a wide range of backgrounds and disciplines - from physics and philosophy to formal methods research and full-fledged corporations. We’re new parents and new grads, dog lovers and dogfooders. We get together often to bike, bake, and meet up in parks. In our interactions, we believe respect and honesty go hand in hand, and prioritize both.

Semgrep is an equal-opportunity employer seeking a diverse range of backgrounds. We value who you are - including your cultural heritage, your socioeconomic status, your age, your race, your gender, your sexual orientation, your disabilities. We value what’s vitally important to you - your family, your religion, your politics. We value what you love in this world - your music, your weekend pursuits. We believe in welcoming varied professional backgrounds, educations, and interests. If you’re exceptional in your role, believe in Semgrep’s mission, and treat Semgrep’s values as your own, you belong here.

Please Note: For US-based roles open to remote work, we are currently able to hire employees in the following states only: Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Illinois, Maryland, Massachusetts, Michigan, Missouri, Nebraska, New Jersey, New York, North Carolina, Oregon, Tennessee, Texas, Virginia, Washington, and Wisconsin.

As published by Semgrep. Applications are handled on their site.

Skills this posting mentions

Knowledge ManagementArtificial IntelligenceLegal Operations

About Semgrep

Semgrep is the leader in code security for builders. Teams catch, flag, and fix real issues before they ship, powered by security that learns as you build. Built for builders and trusted by security, the platform unifies SAST, SCA, and secrets scanning, embedding protection directly into the development workflow so security begins where code is written and lives where developers work. Semgrep combines deterministic static analysis with AI reasoning to power detection, triage, and remediation. This approach helps teams uncover real vulnerabilities, prioritize reachable risks, and fix issues faster. Customers report up to 80% fewer false positives across Code and Supply Chain, with 95% of findings validated by security reviewers across more than 6 million results. Founded in San Francisco, Semgrep is backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital. It is recognized by Gartner in Application Security Testing and trusted by leading organizations, including Snowflake, Dropbox, and Figma. Learn more at semgrep.dev.

All 17 openings at Semgrep

One click, then it is written

Apply to Semgrep with a resume written for this role.

Queue Corporate Counsel and I read the posting, rewrite your resume against it, draft the cover letter, and score the fit. Then you press send, or press one button and I fill in Semgrep’s form for you.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • 25 sent a week, free
  • No card
  • Nothing sent until you say so

More roles at Semgrep

See all

Similar roles elsewhere

See more

Put this to work

Paste your career in once. Every application after that is written for you.

Drop a resume or a LinkedIn URL. I rank the live openings against it, rewrite the resume and write a cover letter for the best of them, and fill in the employer's form when you press the button. You read, you decide what goes out.

  1. 01Drop your resume

    A PDF or a LinkedIn URL. About a minute, once.

  2. 02I rank the openings

    Every weekday morning, the live catalog scored against your history. Up to 20 worth your time, not two hundred links.

  3. 03Each one is written up

    Resume rewritten for the posting, a cover letter, a fit score. Press send, or let me fill in the form.

  • New matches ranked and written before you are up.
  • Every bullet stays inside what your history supports. Nothing invented.
  • Queued, submitted, interviewing, offer: one screen, not a spreadsheet.

500 free credits on sign-up. No card. Nothing is sent until you say so.

Listed from the job board Semgrep publishes. Refolk is not the employer and does not handle their hiring. Applications go to Semgrep directly.