About Semgrep Semgrep, the leader in code security for builders, empowers invention without friction. Teams catch, flag, and fix real issues before they ship, powered by security that learns as they build. Semgrep secures code as it’s written and provides guardrails that pave the road for developers to move fast and stay secure. Built for builders and trusted by security, Semgrep lives where developers work, delivering fixes without breaking flow, and giving security teams visibility, control, and confidence. Semgrep gets smarter as you build, with AI that learns your context to cut false positives and prioritize reachable vulnerabilities, validated by 95% of security reviewers across 6M+ findings. Semgrep makes zero false positives a reality with AppSec teams triaging 80% fewer false positives across Code and Supply Chain, dramatically shrinking the backlog. Founded in San Francisco and backed by Menlo Ventures, Felicis Ventures, Lightspeed Venture Partners, Redpoint Ventures, and Sequoia Capital, Semgrep is recognized by Gartner in Application Security Testing and is trusted by leading organizations, including Vanta, Lyft, and Dropbox. Learn more at semgrep.dev .
About
the Role Semgrep has a large and growing base of developers and security engineers who use our product every day, many of them before they ever talk to sales. This role exists to turn that organic interest into a scalable, measurable top-of-funnel engine. As our first dedicated PLG Growth Marketer, you'll own everything pre-sign up: building the campaigns, experiments, and content needed to drive awareness, increase free product sign-ups, and get developers and security engineers in the door. You'll sit within the Global Campaigns & Growth Marketing team and work closely with Product, Lifecycle, and Web to connect marketing motion to free product adoption. A key part of this role is partnering with the Product Growth and Engineering teams to facilitate a clean handoff of new sign-ups, ensuring the users marketing brings in are set up for the activation and adoption work those teams own downstream. This role is for someone with high agency, strong experimentation instincts, and a bias toward building and testing fast. Location expectations: Our expectation is that this role will be hybrid - requiring 2-3 days a week in our San Francisco office.
What You'll Own Top-of-Funnel Campaigns Develop and execute campaigns across paid, organic, and owned channels designed to drive awareness and free product sign-ups. Own campaign strategy and messaging end to end, from concept through execution and reporting. Build mini-campaigns tied to specific features, use cases, and product moments to drive targeted acquisition. Landing Pages & CRO Own the growth landing page strategy, including building, testing, and optimizing pages focused on driving free sign-ups and feature usage. Run A/B and multivariate tests across landing pages, CTAs, headlines, and page structure to continuously improve conversion rates. Partner with web and design to move quickly on experiments without sacrificing quality. Messaging & Content Develop and own top-of-funnel messaging that speaks to developers and security engineers in a way that resonates. Create and test content across formats including ads, landing pages, email, and organic social to drive awareness and sign-ups. Stay close to what competitors are doing and use that to sharpen our positioning and messaging. Experimentation Build and maintain a structured experimentation roadmap: hypotheses, tests, results, and iteration. Run experiments across acquisition channels, landing pages, CTAs, and campaign messaging. Document learnings and share them broadly so
the team compounds on what works. Reporting & Measurement Own top-of-funnel reporting: traffic, sign-up volume, channel performance, and campaign attribution. Define and track KPIs that tie marketing activity to free product growth. Present performance and learnings to product and marketing leadership on a regular cadence. You are ideal for this role if you Have 4+ years of experience in growth marketing at a B2B SaaS company with a developer or technical audience. Have hands-on experience running campaigns and experiments focused on driving free product sign-ups or trials. Are deeply data-driven. You know how to instrument a funnel, run a test, and turn results into action. Have strong CRO instincts and experience optimizing landing pages, CTAs, and sign-up flows. Are a strong experimenter: you know how to design a test, avoid common pitfalls, and learn fast. Are comfortable owning messaging and content for a technical audience without needing a lot of direction. Champions a culture of collaboration and accountability by effectively navigating resistance and diverse perspectives into clear, actionable decisions. Partners across functions to implement change, balancing empathy for stakeholders with a bias toward execution. Have experience with paid social, paid search, and organic channels targeting developers or security practitioners. Have used tools like Marketo, Salesforce, and web analytics platforms to track and report on campaign performance.
Nice to Have Experience at a security, developer tools, or open-source company. Familiarity with community-led growth motions and how open-source communities can serve as a top-of-funnel channel. Background in conversion rate optimization across landing pages and product sign-up flows. Experience marketing to both developers and security practitioners and understanding how their behaviors differ.
Compensation The estimated starting annual salary range for this position is $122,000 to $152,500 USD. The actual base salary will be determined based on a number of factors, which may include job-related skills, relevant experience,
qualifications, location, internal equity, and market data. In addition to base salary, total
compensation may include equity, variable
compensation, and
benefits. We view equity as a meaningful part of our
compensation philosophy and a way for employees to share in the long-term value they help create.
Compensation ranges are reviewed regularly and may be adjusted as
the role, individual performance, or market conditions evolve. What we offer (FTE only) Our goal is to competitively and fairly compensate every Semgrep employee with a system that equally rewards those who are vocal and those who are less comfortable making demands during the final steps of the hiring process. To that end, we generate internal
compensation bands that are used when discussing and negotiating salaries. We update these based on market data to make sure they’re above the average for comparable roles. We invest in our employees’ well-being and long-term success through a competitive, market-aligned
benefits program that meets or exceeds local market standards across all of the regions in which we hire.
Benefits offerings vary by location to reflect local
requirements and norms. For more detailed, location-specific information, please visit Semgrep
Benefits .
Who we are We bring together people from a wide range of backgrounds and disciplines—from physics and philosophy to formal methods research and full-fledged corporations. We’re new parents and new grads, dog lovers and dogfooders. We get together often to bike, bake, and meet up in parks. In our interactions, we believe respect and honesty go hand in hand, and prioritize both. Semgrep is an equal-opportunity employer seeking a diverse range of backgrounds. We value
who you are — including your cultural heritage, your socioeconomic status, your age, your race, your gender, your sexual orientation, your disabilities. We value what’s vitally important to you — your family, your religion, your politics. We value what you love in this world — your music, your weekend pursuits. We believe in welcoming varied professional backgrounds, educations, and interests. If you’re exceptional in your role, believe in Semgrep’s mission, and treat Semgrep’s values as your own, you belong here. Please Note: For US-based roles open to remote work, we are currently able to hire employees in the following states only: Arizona, California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Illinois, Maryland, Massachusetts, Michigan, Missouri, Nebraska, New Jersey, New York, North Carolina, Oregon, Tennessee, Texas, Virginia, Washington, and Wisconsin.
About Semgrep
Semgrep is on a mission to make it expensive to exploit software. As the team behind the most popular SAST, we built the Semgrep AppSec Platform to deliver industry-leading code, dependency, and secrets scanning to enable organizations to ship secure code quickly without slowing down development.
With fast, customizable code analysis across large codebases, Semgrep helps teams catch vulnerabilities early and fix them faster. Leading companies like Snowflake, Plaid, Figma, Lyft, and Dropbox rely on Semgrep to secure their software.
Semgrep is funded by top investors, including Felicis Ventures, Lightspeed Venture Partners, Menlo Ventures, Redpoint Ventures, and Sequoia Capital.
