Martin Jambon
Artist at martinj.art
San Francisco, California, United States
Summary
🤩
Rockstar🎓
Top SchoolMartin Jambon is an experienced program analysis engineer and OCaml specialist with 17 years of engineering and research experience, now based in San Francisco. He turns advanced static and dynamic analysis techniques into production tools that scale to large, real-world codebases, contributing notably to Semgrep and its rule ecosystem. Comfortable as an individual contributor in ambiguous projects, he excels when leaders set goals and let him design the technical path, routinely delivering systems that are hard to plan upfront. His background spans bioinformatics PhD work—where he built protein-structure tooling—to building parsers, tree-sitter integrations, and security rules for Semgrep, reflecting a rare blend of scientific rigor and practical automation. He’s equally at home architecting backends, mentoring early engineering teams, and refining security-focused analysis rules across multiple languages.
17 years of coding experience
21 years of employment as a software developer
Biology, Physics, Chemistry, Mathematics, Biology, Physics, Chemistry, Mathematics at Lycée Saint LouisPhD, Bioinformatics, Protein Structure, PhD, Bioinformatics, Protein Structure at École normale supérieure de LyonBac S, Bac S at Lycée Pothier
English, French
Stackoverflow
4,729reputation
333kreached
56answers
7questions
ocaml
top-5%
functional-programming
top-5%
Github Skills (30)
tree-sitter10
static-analysis10
parser10
semgrep10
bash10
java10
ocaml10
ruby10
security10
javas10
parsing10
parse10
javascript9
typescript9
typescript-types9
Programming languages (18)
Github contributions (5)
semgrep/semgrep
Jun 2020 - Jan 2023
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Role in this project:
Back-end Developer & Compiler Engineer
Back-end Developer & Compiler EngineerContributions:662 reviews, 650 commits, 722 PRs in 2 years 8 months
Contributions summary:Martin primarily contributed to the development and integration of the tree-sitter-based parser for the Semgrep project. Their work included integrating a Ruby tree-sitter parser, adding test cases for JavaScript function bodies, and making various fixes and improvements to existing parsers. They addressed issues related to code parsing, contributing to the project's static analysis capabilities by incorporating improved language support. The user also engaged in code cleanup, incorporating improvements across multiple parsers and languages.
looklinterpythonr2cjavascript
semgrep/semgrep-rules
Mar 2021 - Sep 2022
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
Role in this project:Security Engineer
Security EngineerContributions:14 reviews, 28 commits, 27 PRs in 1 year 6 months
Contributions summary:Martin primarily contributed to improving the rule set of the `semgrep-rules` repository, a collection of security rules for the Semgrep static analysis tool. Their work involved adding new rules for various languages (OCaml, Bash, Java, C#) to detect security vulnerabilities and best-practice violations. They also fixed parsing issues and updated existing tests, further enhancing the accuracy and coverage of the security rules.
securitysemgrepsemgrep-rulessemgrep-registryprogram-analysis
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.