Program Analysis Engineer

TL;DR

🔐 At Coana, we're changing how companies manage vulnerabilities in open source dependencies

🦄 We recently closed a preseed round with one of the world's top venture capital funds

🧑‍🤝‍🧑 We're currently a team of 8 dedicated and friendly people - and expect to be many more in the future

👩‍💻 We're looking for a programming languages expert

📌 The role is in Aarhus, Denmark, with flexible schedules

⚒ The existing tech stack is TypeScript, Next.js, Nest.js, Azure Kubernetes Service, Helm, Argo CD, and Planetscale

⬇ We can't wait to hear from you

Who we are

Coana is an early-stage startup on a mission to help companies navigate the often incomprehensible task of managing vulnerabilities in open source dependencies.

We're building a cutting-edge vulnerability management tool that automatically categorizes vulnerabilities as reachable or unreachable. By marking up to 95% of vulnerabilities as unreachable, developers can focus on fixing the vulnerabilities that really matter.

At its core, Coana is based on the open-source static analysis Jelly (https://github.com/cs-au-dk/jelly) maintained by a research group at Aarhus University from where Coana was spun out.

Backed by one of the world's top venture capital funds, Coana is positioned for rapid growth and has the potential to capture a billion-dollar market. In this process, we’ll expand the team with analysis experts to grow the number of supported programming languages.

We are a team of 8: one world-leading static analysis researcher, four of his previous PhDs, one experienced entrepreneur, and two developers with years of experience building large scalable IT systems. We expect to grow the team rapidly in the years to come.

About the role

We are looking for a programming languages expert who will be a key person in designing and developing a scalable call graph analysis that can be used for marking the majority of open source vulnerabilities as unreachable.

As part of our team, you’ll work closely with our CTO and the rest of the team to develop and maintain static analysis. As the team expands in the coming years, you will become part of a larger analysis team. Working at Coana will give you the opportunity to improve your development skills and learn a lot about developing static analysis for the masses as well as learn a lot from being part of a startup with rapid growth.

At Coana, we work in an iterative process of customer validation and product development. We validate all new features with customers and users to ensure they provide real value. Plans and priorities may change rapidly as we learn more about our customers, and we're seeking someone who can thrive in this dynamic environment.

We write our applications primarily in TypeScript using Next.js and Nest.js. Our services are deployed to Azure Kubernetes Service using Helm and Argo CD. Our database is hosted at Planetscale. You don't have to be a specialist in a language/tool/system, but we expect quite a lot of flexibility in terms of learning new systems on-the-fly.

Our office is in Aarhus, Denmark. We prefer in-office (with flex) but we’re open to other solutions with the right person. We offer opportunities for professional and personal development, an Employee Stock Option Program, and paid vacation.

About you

You are experienced with developing static analyses.

You care about delivering high-quality products and encourage others to do the same.

You are a team player with a strong personal drive.

At Coana, we value skills, ambition, and curiosity over seniority, so don't hesitate to apply no matter your experience level. We're seeking someone who cares deeply about delivering high-quality products and is a team player with a strong personal drive.

At Coana, we value skills, ambition, and curiosity over seniority, so don't hesitate to apply no matter your experience level. We're seeking someone who cares deeply about delivering high-quality products and is a team player with a strong personal drive.

Interested?

Apply now to be part of a team that is set to ease the pain of managing security vulnerabilities!

We can't wait to hear from you.