Software Engineer II

at  GITHUB INC

About GitHub: As the global home for all developers, GitHub is the complete AI-powered developer platform to build, scale, and deliver secure software. Over 100 million people, including developers from 90 of the Fortune 100 companies, use GitHub to build amazing things together across 330+ million repositories. With all the collaborative features of GitHub, it has never been easier for individuals and teams to write faster, better code.
Locations: In this role you can work from Remote, Denmark
Overview:
In the GitHub code scanning team, we are passionate about ensuring the security and quality of the world’s software - from open source to the enterprise. We believe that the best way to secure and improve the quality of software is to detect actionable issues early in the development process, and actively facilitate their remediation. This ensures that found alerts are fixed, and provides a great user experience that integrates naturally into developer workflows.
Our team develops CodeQL and Copilot Autofix, two key components powering the code scanning product that’s part of GitHub’s Advanced Security offering, used by hundreds of thousands of developers and projects every day. CodeQL is GitHub’s own semantic code analysis engine that uses world-class static analysis research and technology to deeply analyze code, enabling the early detection of security vulnerabilities and correctness errors in software. CodeQL currently supports a wide range of programming languages, including C/C++, C#, Go, Java, JavaScript/TypeScript, Kotlin, Python, Ruby, Rust, and Swift. Copilot Autofix is our LLM-powered remediation system that produces high-quality fix suggestions for code scanning alerts, empowering developers to fix alerts as soon as they are found or that already exist in their codebase.
Responsibilities:
In this role, you will join one of the distributed engineering teams responsible for building and expanding the core capabilities of code scanning with CodeQL and Copilot Autofix, in one of the following tracks:

CODEQL EXPERIENCES

In this track, you will be part of the CodeQL Experiences team, and work primarily on the CodeQL CLI, the CodeQL Action, and LLM-powered Copilot Autofix capabilities. You will work on integrating CodeQL as a code scanning tool running in production in GitHub Actions, third-party CI systems, the command line, and the IDE. You will work on building, expanding, and robustly evaluating the Copilot Autofix engine, which uses LLMs and contextual information from code scanning alerts to produce AI-powered fix suggestions for those alerts.
In any of the above tracks, you will work closely with various engineering teams, product managers, designers, and technical writers that build different aspects of the code scanning product, to influence product direction and deliver features to users, with clear focus on quality, reliability, and user experience. You will engage with internal users and external users (both from enterprise customers and the open-source community) to help them succeed with the product. You’ll influence and provide feedback on the organisational culture and processes, always looking for opportunities to improve in a continuous pursuit of excellence.
Qualifications:

REQUIRED QUALIFICATIONS:

Experience in software engineering, with a high level of familiarity with C, C++, or Rust, and the interest and ability to learn additional programming languages as required.

In addition, applicants should have a good level of familiarity with one or more of the following areas:

• Software security, including static analysis, dynamic analysis, software supply chain security, and best practices in creating high-quality, secure code
• Experience building developer tools that operate on source code, such as compilers, parsers, linters, static analysers, debuggers, CLI tools, or IDE extensions
• Machine learning applied to understanding source code, specifically using prompt engineering with large language models (LLMs) and systematic data collection and result evaluation

PREFERRED QUALIFICATIONS:

Additionally, we would highly encourage applying if you have one or more of the following skills:

• Experience operating user-facing software at scale, including availability and observability
• Experience working in a distributed team, operating effectively across multiple time zones (our teams span a wide time zone range from Pacific time to Central European time) and of working with multiple stakeholders and teams across engineering, product, and design
• Knowledge of compilers, program analysis, programming language design and implementation
• Knowledge of logic programming or database query languages (e.g. SQL, Prolog, Datalog, Kusto Query Language) and building integrations with CI/CD systems, such as GitHub Actions or Jenkins

GitHub Leadership Principles:

Please refer the Job description for details