Staff Product Security Engineer
Endorlabs · Remote - US
About this role
## About Us AI coding is the largest use case of enterprise AI adoption today. But the bottleneck has shifted from code generation to security and safety—AI agents write code faster than teams can review it, and a large portion of the code they produce is insecure. Vulnerabilities are piling up faster than companies can fix them, and adversaries can exploit new issues within hours. That’s where **Endor Labs** comes in. Our patented **code context graph** maps code, open source, containers, and infrastructure to show which vulnerabilities can actually be reached and exploited—then delivers fixes that won’t break the application. Security teams get evidence instead of noise, and developers get fixes instead of tickets. Endor Labs is the third company from Founder & CEO **Varun Badhwar** (built Prisma Cloud from $0 to $300M ARR at Palo Alto Networks). We’ve raised **$163M** from Lightspeed, Coatue, DFJ Growth, Salesforce Ventures, and Dell Technologies Capital. Software runs everything around our lives—banking, hospitals, airports, and power grids. AI now writes more of it every day. Our mission is to make sure the world can trust that software. --- ## How You’ll Make an Impact As our **founding Principal Product Security Engineer** (Staff-level), you’ll work closely with the **Head of Security & IT** to set and execute the security strategy for the Endor Labs platform. This includes: - Supply chain security - First-party code scanning - Runtime monitoring - AI agent hardening - Threat modeling and design reviews - Deploying agents to improve quality and scale across these areas ### The top problems you will solve - **Fix issues in our application**: Validate, prioritize, and fix findings at scale on an ongoing basis. You’ll help build the internal platform work that will guide customer efforts. - **Stop insecure code from being merged**: Build the internal apparatus around our own AI SAST product and create “paved paths” so engineers and citizen developers can confidently contribute secure code. You’ll also partner with Product and Engineering to solve customer problems—shaping the roadmap, reviewing designs and mocks, and providing feedback on implementation. You’ll share what works with customers, prospects, and the broader security community. --- ## What You Bring to the Table - **10+ years** in application or product security, including staff/principal-level technical leadership - A track record of **building security tooling and automation** that runs at scale and measuring whether it works - Proven ability to **influence a product or platform roadmap**—turning internal security work into something others adopt - **Hands-on experience applying LLMs and agents to security problems** (building harnesses, comparing tools, measuring failure modes, and having strong opinions on both finding/validating/fixing vulnerabilities and preventing insecure code from being merged) - **Deep threat modeling and secure architecture** skills - Ability to **set direction and influence** senior stakeholders without formal authority - A **fix-it mindset**: investigate root causes and drive remediation - Comfort building from scratch in an ambiguous, fast-moving environment and setting priorities without an established playbook ### Nice-to-haves - Experience securing **build systems and CI/CD at scale**, especially **Bazel monorepos** - Background in security research (vulnerability research, program analysis, or static analysis tooling) - Confer
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.