ZipRecruiter

Log In

1

Static Analysis Jobs (NOW HIRING)

Kai

Senior Software Engineer - Static Analysis

San Jose, CA · On-site

$143K - $189K/yr

They are seeking a Senior Software Engineer with deep experience in static analysis to own and evolve their core analysis platform, shaping analysis architecture and balancing precision, coverage ...

Endor Labs

Program Analysis Engineer

Palo Alto, CA

This is an individual contributor role focused on our static analysis and ML-for-code initiatives. As an MTS, you will contribute to our existing suite of static analysis tools, help evolve our SCA ...

Endor Labs

Program Analysis Engineer

Palo Alto, CA · On-site

This is an individual contributor role focused on our static analysis and ML-for-code initiatives. As an MTS, you will contribute to our existing suite of static analysis tools, help evolve our SCA ...

Airbus

Static Stress Engineer - Contract

Wichita, KS · On-site

$52.50 - $72/hr

Duties include performing static analysis for both metallic and non-metallic parts while working in close collaboration with design and fatigue colleagues to provide repair solutions. Methods include ...

Ag

Static Stress Engineer - Contract

Wichita, KS · On-site

$52.50 - $72/hr

Duties include performing static analysis for both metallic and non-metallic parts while working in close collaboration with design and fatigue colleagues to provide repair solutions. Methods include ...

AAA USA Inc

Structural Analysis Engineer

Wichita, KS · On-site

Apply knowledge of structural analysis (e.g., materials technology, finite element modeling, static analysis, fatigue analysis, damage tolerance analysis, thermal analysis, vibration analysis ...

next page

Showing results 1-20

All JobsStatic Analysis Jobs

Static Analysis information

See salary details

$45.5K

$93.2K

$135.5K

How much do static analysis jobs pay per year?

As of Jul 16, 2026, the average yearly pay for static analysis in the United States is $93,179.00, according to ZipRecruiter salary data. Most workers in this role earn between $70,000.00 and $118,000.00 per year, depending on experience, location, and employer.

Are coding jobs still in demand?

Coding jobs, including roles like software developers and static analysis engineers, remain in high demand due to ongoing digital transformation and cybersecurity needs. Skills in programming languages, code review, and tools like static analyzers are valuable, and demand is expected to grow as technology advances.

What are the key skills and qualifications needed to thrive in the Static Analysis position, and why are they important?

To thrive in a Static Analysis role, you need a strong background in software engineering, programming languages (such as C, C++, Java, or Python), and an understanding of code security and quality principles, often supported by a relevant degree in computer science or a related field. Familiarity with static analysis tools like SonarQube, Coverity, or Fortify, as well as experience with secure coding standards and possibly certifications like CSSLP, is highly beneficial. Analytical thinking, attention to detail, and effective communication skills help in identifying vulnerabilities and explaining findings to development teams. These capabilities are vital for ensuring code reliability and security, reducing software defects, and supporting organizational compliance goals.

What are some static analysis tools?

Static analysis tools are used by professionals in roles like static analysis to examine code for errors, vulnerabilities, and coding standards without executing it. Common tools include SonarQube, Coverity, Fortify, and ESLint, which help improve code quality and security. Familiarity with these tools is often part of the skill set required for static analysis jobs.

What does a typical day look like for someone in a Static Analysis position?

A typical day in a Static Analysis role involves using specialized tools to review source code for potential vulnerabilities, bugs, and deviations from security or coding standards. You’ll analyze scan results, prioritize findings, and work closely with developers to remediate issues, often participating in code reviews and team meetings. The role also includes documenting analyses, updating reports, and occasionally contributing to the development or refinement of coding guidelines. Successful static analysts balance independent investigative work with collaborative problem-solving in a dynamic, detail-oriented environment.

What is a Static Analysis job?

A Static Analysis job involves analyzing software code without executing it to identify potential security vulnerabilities, coding errors, and performance issues. Professionals in this field use automated tools to scan source code, bytecode, or binaries to detect flaws early in the development cycle. They work closely with developers and security teams to ensure code quality, compliance with industry standards, and secure coding practices. This role is crucial in preventing security breaches and improving software reliability before deployment.

What jobs use statistical analysis?

Jobs that use statistical analysis include roles such as data analyst, data scientist, quantitative analyst, market researcher, and quality control analyst. These positions require skills in statistical software, data interpretation, and often a background in mathematics or statistics to inform decision-making and problem-solving across various industries.

What does static analysis do?

Static analysis is a process used by software developers and security analysts to examine code without executing it. It helps identify potential errors, vulnerabilities, and coding standards violations early in the development cycle, often using specialized tools. This technique improves code quality and security by detecting issues before deployment.
More about Static Analysis jobs
What states have the most Static Analysis jobs? States with the most job openings for Static Analysis jobs include:
What job categories do people searching Static Analysis jobs look for? The top searched job categories for Static Analysis jobs are:
Static Analysis jobs near you
Infographic showing various Static Analysis job openings in the United States as of July 2026, with employment types broken down into 87% Full Time, 11% Part Time, and 2% Contract. Highlights an 83% Physical, 3% Hybrid, and 14% Remote job distribution, with an average salary of $93,179 per year, or $44.8 per hour.

Senior Software Engineer - Static Analysis

Kai Cyber, Inc.

San Jose, CA • On-site, Remote

$143K - $189K/yr

Full-time

Posted 18 days ago

Job description

Kai is the AI company rebuilding cybersecurity for the machine-speed era. Founded by second-time founders and trusted by Fortune 500 enterprises, Kai is building a future where security has no categories, no silos, and no human speed bottlenecks. The Kai Autonomous Defense Platform replaces fragmented, human-limited workflows with agentic AI systems that continuously contextualize, assess, reason, and execute security work at machine speed, making human defenders superhuman.
Why Kai?
  • Well-funded: $125M raised, with the capital, runway, and resolve to rebuild cybersecurity from first principles.
  • Proven: We've earned the trust of Fortune 500 and Global 2000 companies, and we're just getting started. Their confidence in Kai reflects what we've built: an AI-native cybersecurity platform that performs at machine speed with human-expert accuracy.
  • Experienced founders: Our founding team are second-time entrepreneurs, each with 20+ years in cybersecurity. They've built and scaled before, and they're doing it again with a bigger vision.
  • Competitive compensation: Highly competitive salary, meaningful equity, and a culture where your contributions are recognized and rewarded as we grow.

Senior Software Engineer - Static Analysis
About the Role
We're looking for a Senior Software Engineer with deep experience in static analysis and systems engineering to own and evolve our core analysis platform.
At Kai, we build advanced static analysis technology that helps engineering and security teams determine which vulnerabilities are actually reachable and exploitable in production - not just flagged by dependency scans.
Our engine works at the IR and bytecode layers, tracing control flow and data flow across large codebases to cut false positives and improve how teams prioritize risk. We support Java and Go today, with analysis built for real-world complexity: reflection, indirect calls, dynamic dispatch, and cross-package flows.
In this role, you'll be a technical decision-maker on how that platform grows -shaping analysis architecture, defining what reachability and exploitability mean in practice, and balancing precision, coverage, and performance as we scale.
What You'll Bring
  • 7+ years of software engineering experience, with 4+ years in static analysis, program analysis, compiler infrastructure, or closely related domains.
  • Deep understanding of core program analysis concepts:
    • Control-flow and data-flow analysis
    • Call graph construction
    • Inter-procedural analysis
  • Taint tracking and reachability analysis
  • Hands-on experience working with IRs, bytecode, ASTs, or compiler/analysis pipelines - not just using tools, but understanding how analysis is built.
  • Strong programming skills in Java, Go, C++, or comparable systems/backend languages, with comfort working across analysis engine codebases.
  • Practical experience handling real-world language and runtime complexity - reflection, dynamic dispatch, indirect calls, and framework-specific behavior.
  • Experience building scalable analysis or backend systems for large, production codebases, with attention to performance and reliability.
  • Technical judgment and ownership - able to make architecture and trade-off decisions, drive design direction, and work effectively with minimal oversight.
  • Comfort operating in a fast-moving startup environment, balancing depth of analysis with shipping velocity and product impact.

Nice to Have
  • Deep experience with LLVM, MLIR, SSA-based analysis, or comparable compiler/analysis IRs-and judgment on when to build vs. integrate existing frameworks.
  • Background in application security or vulnerability analysis, with practical understanding of reachability, exploitability, and how security teams triage and remediate findings.
  • Experience building developer tooling, compilers, or security infrastructure at scale-where correctness, performance, and usability all matter.
  • Familiarity with program analysis research, with interest in applying academic advances to real-world codebases and product constraints.
  • Track record of technical leadership - architecture decisions, design reviews, mentoring, or driving cross-functional initiatives in complex engineering domains.

What You'll Do
You'll be a technical decision-maker on our static analysis platform: defining how we analyze code at scale, what "reachable" and "exploitable" mean in practice, and where we invest for accuracy, coverage, and performance.
  • Own the technical direction of our static analysis stack-from IR/bytecode analysis through inter-procedural CFG and data-flow systems-and make principled trade-offs between precision, scalability, and time-to-ship.
  • Define and evolve reachability and exploitability models for application and dependency vulnerabilities, aligning analysis outputs with how security teams prioritize and remediate risk.
  • Set standards for analysis quality across complex real-world patterns (reflection, dynamic dispatch, indirect calls, framework-specific behavior) and decide which gaps to solve with deeper analysis vs. heuristics vs. ecosystem integration.
  • Drive language and runtime expansion by evaluating coverage gaps, sequencing language support, and choosing the right abstractions so new languages don't require reinventing the core engine.
  • Lead performance and scalability initiatives for enterprise-scale codebases-profiling bottlenecks, shaping architecture for parallel/distributed analysis, and establishing measurable targets for throughput and resource use.
  • Partner with security researchers to translate emerging threat models and vulnerability classes into concrete analysis capabilities, test cases, and product requirements.
  • Collaborate with platform engineers on APIs, CI/CD integration, and developer workflows so analysis results are actionable in production pipelines-not just technically correct.
  • Guide engineering execution through design reviews, technical specs, and hands-on prototyping; mentor engineers on program analysis concepts and our analysis architecture.
  • Identify and champion patentable and foundational innovations that strengthen our long-term technical moat in code security analysis.

Apply