Senior Software Engineer; Java - Remediation Agent

Overview

Who is Sonar? Sonar helps prevent code quality and code security issues from reaching production, amplifies developers' productivity in concert with AI assistants, and improves the developer experience with streamlined workflows. Sonar analyzes all code, regardless of who writes it — your internal team, genAI, or third parties — resulting in more secure, reliable, and maintainable applications. Rooted in the open source community, Sonar’s solutions support over 30 programming languages, frameworks, and infrastructure technologies.

Today, Sonar is used by +7M developers and 400K organizations worldwide, including the DoD, Microsoft, NASA, Master Card, Siemens, and T-Mobile.

We believe in developing great products that are supported by great internal teams and a strong culture. We are highly committed to and obsessed with the company, users, each other, and our open source community. We have high standards and hold each other accountable for acting with positivity, dedication, thoughtfulness, empathy, and passion daily.

We are deliberate with our decisions with high clarity of intention. At the same time, we feel extreme urgency and move forward quickly. And lastly, we are highly effective and operationally efficient. We operate collectively as One Team to accomplish our goals. At Sonar, CODE is more than just an acronym – it's a mindset that defines daily operations.

The Impact You Will Have At Sonar, we believe that simply reporting code issues is not sufficient. To truly level up the quality of the world's software, we must empower millions of developers to fix them automatically. With over 400,000 enterprises relying on our products, we hold a unique lever to shape how software is built.

Recent breakthroughs in AI have made autonomous remediation a reality, but one major hurdle remains:
Trust. Generative AI makes mistakes, and enterprises cannot automate what they do not trust. This is where you come in. As a Senior/Staff Engineer, you will architect the backend for Verified Autonomous Remediation, a sophisticated Agentic workflow that doesn’t just generate code, but rigorously tests and validates it using Sonar’s analysis engine. You will tackle the hard engineering problems required to close the "Trust Gap."

• Architect the "Unified Remediation Engine". You will design the high-throughput decision logic that powers our remediation efforts. You will build the backend services that intelligently route requests between deterministic instant Quick Fixes, LLM-based reasoning fixes, and complex Agentic flows.
• Build Robust Agent Architecture. You will contribute to the Sonar Remediation Agent code, transitioning research concepts to a resilient, high-scale production service. You will implement self-healing workflows where the Agent iteratively fixes the code it produces until the build is green.
• Solve the "Sandboxing" Problem. You will architect the secure execution environments required to run untrusted, AI-generated code. You will design the isolation layers that allow Agents to iterate on code improvements without compromising our infrastructure.
• Engineer for Reliability & Safety. You will implement critical safety mechanisms, like Circuit Breakers to automatically reroute requests to the proper engine when acceptance rates drop. Crucially, you will own the cost/performance trade-off, ensuring our AWS architecture scales to millions of events without letting token costs spiral.
• Act as a Technical "Force Multiplier". Beyond building systems, you’ll mentor the squad through design reviews and collaborate with the Research team to ensure our agent is not just state-of-the-art, but production-safe.

• Strong Backend & Cloud Expertise. You have 8+ years of experience building scalable resilient systems. You are strong in AWS architecture and know how to design for high availability and low latency with cost in mind.
• Polyglot Ecosystem (Java & Python). You are comfortable operating in a hybrid environment:
  Java for deep integration with the Core Sonar analysis engine and Python for the AI/Agent reasoning layer. You should be…