Want to know if this job is worth applying to?
Bochum, Nordrhein-Westfalen, Deutschland
Onsite
Who is Sonar?
Sonar is driving the future of agent-centric software development. As the leader in AI code review and verification, we solve a critical problem: ensuring that software generated by AI-assisted developers or autonomous agents is reliable, secure, and maintainable.
Integrating seamlessly with Claude Code, Codex, Cursor, GitHub Copilot, Gemini, and Devin, we help over 75% of the Fortune 100 build trusted, reliable, compliant software. Customers who use Sonar are 44% less likely to report an outage due to AI-generated code.
We believe code verification is the critical missing link in the Agent-Centric Development Cycle (AC/DC). Industry giants like Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company count on us to provide independent, explainable, consistent review and governance of their AI-generated code via products like:
SonarQube: The world's leading AI code review and verification platform.
SonarQube Foundation Agent: Currently topping the leaderboards for agentic software repair.
SonarSweep & Sonar Context Augmentation: Providing the enterprise-grade context and constraints agents need to be truly effective.
Our team operates across global hubs in Austin, Bochum, Dubai, Geneva, London, Singapore, Tokyo, and Washington D.C. We move with a mindset we call CODE:
Committed to our customers and community.
Obsessed with quality.
Deliberate in our decisions.
Effective as one team.
With over $400M in revenue and profitable, fast-paced growth, we are building the backbone of the AI software revolution. If you're hungry to have an impact, want to build at a fast pace, and ready to work at the forefront of AI, we want to hear from you.
The Impact You Will Have:
As an Agentic Software Engineer on the Platform Architecture squad, you will build the multi-agent systems that autonomously refactor and modernize Sonar's own codebase — starting with one of our biggest technical bets: unifying SonarQube Cloud and SonarQube Server onto a single, portable architecture ("build once, deploy twice"). You will:
Design and build agentic refactoring pipelines that can safely extract a domain's logic from our existing SQS/SQC codebases and re-platform it onto our Unified Core (a hexagonal "capability-core + adapters" architecture), with minimal human oversight.
Define the guardrails that make autonomous refactoring safe at scale — verification gates, automated test generation, static analysis, and rollback strategies that let agents move fast without breaking production code relied on by 7M+ developers.
Prove the approach on real migrations — Micronaut-to-Spring conversions, Lambda-to-container consolidations, SQS/SQC API convergence (consolidating overlapping API surfaces onto shared contracts), and strangler-fig domain extractions — before scaling it into a repeatable, multi-agent "coding squad" capable of tackling many domains in parallel.
Stay hands-on in the Java/Spring codebase often enough to critically review what the agents produce, recognize when a refactor is architecturally wrong, and correct the system that generated it — not just the output.
Spend the majority of your time (roughly 70%) designing, building, and iterating on agentic tooling: orchestration, tool-use, context management, and evaluation harnesses for autonomous code-modification agents.
Build and refine the verification layer that gates what agents are allowed to ship — automated test generation, regression detection, static analysis (using our own SonarQube), and human-in-the-loop checkpoints where warranted.
Spend the remainder of your time (roughly 30%) hands-on in our Java/Spring codebase: reviewing agent-generated pull requests, fixing what they get wrong, and feeding those lessons back into the tooling.
Partner closely with the Server, Cloud Platform, and value-stream squads whose domains you're migrating — earning their trust and buy-in matters as much as the code itself.
Contribute to the Architecture Decision Records (ADRs) and standards that govern how the Unified Core evolves.
Track and evaluate emerging agent frameworks and techniques, bringing back what's genuinely useful — as distinct from what's just hype — for accelerating engineering across Sonar.
Hands-on experience building or operating multi-agent or LLM-agent systems in a real production setting — not just prompting a coding assistant, but designing the orchestration, tool-use, and guardrails around autonomous agents.
Experience building evaluation or verification systems for AI-generated changes: automated testing, static analysis, regression detection, or comparable safety nets for code you didn't personally write.
Strong software engineering fundamentals in Java and Spring (or a comparable JVM/enterprise stack) — enough to read a large, mature codebase critically and tell good architecture from bad.
A track record of owning complex, ambiguous technical problems independently and driving them to resolution — this is an R&D-flavored role inside a production platform team, and you'll be shaping the playbook, not following one.
Experience influencing engineers and squads you don't manage — the migrations you'll enable depend on their trust as much as on your code.
We value diversity, equity, and inclusion
At Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
If you need any accommodation, please reach out to us at hiring@sonarsource.com.
All offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date.
Applications that are submitted through agencies or third party recruiters will not be considered.