Sonar is the independent AI code verification platform trusted by 7M+ developers & organizations to help build secure, reliable software with confidence. Backed by General Catalyst and Insight.
About the role
Partner with product and engineering teams from the earliest design stages to build secure, resilient solutions by design. Review product architectures and AWS environments, ensuring security requirements meaningfully inform technical decisions and final designs.
What they're looking for
- Secure product and cloud architecture
- Extensive experience with application and cloud architectures, predominantly AWS, and a strong interest in how modern cloud patterns can strengthen or weaken security
- Extensive experience conducting application security assessments, including code review and evaluation of authentication and authorization designs
- Experience assessing and securing AI and agentic AI capabilities, with the curiosity to experiment, learn, and help define emerging best practices
- Experience applying threat-modeling approaches, such as STRIDE, to improve design discussions and identify risks early
More about this role
Who is Sonar?
Sonar is driving the future of agent-centric software development. As the leader in AI code review and verification, we solve a critical problem: ensuring that software generated by AI-assisted developers or autonomous agents is reliable, secure, and maintainable.
Integrating seamlessly with Claude Code, Codex, Cursor, GitHub Copilot, Gemini, and Devin, we help over 75% of the Fortune 100 build trusted, reliable, compliant software. Customers who use Sonar are 44% less likely to report an outage due to AI-generated code.
We believe code verification is the critical missing link in the Agent-Centric Development Cycle (AC/DC). Industry giants like Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company.count on us to provide independent, explainable, consistent review and governance of their AI-generated code via products like:
SonarQube: The world’s leading AI code review and verification platform.
SonarQube Foundation Agent: Currently topping the leaderboards for agentic software repair.
SonarSweep & Sonar Context Augmentation: Providing the enterprise-grade context and constraints agents need to be truly effective.
Our team operates...
Browse similar: Startup jobs