Senior Security Researcher
Endorlabs · Remote US
About this role
## About Us AI coding is the largest use case of enterprise AI adoption today. But the bottleneck has moved from code generation to security and safety—AI agents write code faster than teams can review it, and a large share of generated code is insecure. Vulnerabilities are piling up faster than companies can fix them, and adversaries can exploit them within hours. AURI by Endor Labs closes that gap. It runs inside the harness where coding agents work (via hooks, skills, and MCP), so controls sit outside the model and every agent action is visible. Underneath is a patented code context graph that maps code, open source, containers, and infrastructure—showing which vulnerabilities can actually be reached and exploited, and delivering fixes that won’t break the application. Security teams get evidence instead of noise, and developers get fixes instead of tickets. Customers include OpenAI, SpaceX, DoorDash, Dropbox, Atlassian, MongoDB, Snowflake, Robinhood, and Peloton. Endor Labs is backed by Lightspeed, Coatue, DFJ Growth, Salesforce Ventures, and Dell Technologies Capital. ## About the Role We’re looking for a **Senior Security Researcher** to join our offensive security research efforts in **software supply chain security**. This is an opportunity to identify **zero-day vulnerabilities** in software artifacts and **CI/CD systems**, analyze attack trends, and help shape the next generation of security capabilities in our products. You’ll bring deep expertise in vulnerability research, application security, reverse engineering, and offensive security techniques. You’ll also publish groundbreaking research through blogs, white papers, and conference talks. ## How You’ll Make an Impact - Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities. - Develop and refine exploit techniques to understand modern attack vectors targeting software supply chain via malicious code, 3rd party libraries, and CI/CD systems. - Partner with Product Management to translate research findings into innovative security capabilities. - Publish research through technical blogs, white papers, and industry-leading security conferences. - Collaborate with security engineers and developers to prototype and implement detection and mitigation strategies. - Contribute to the security community by building open-source tools, methodologies, or frameworks. - Stay ahead of evolving threats and attacker methodologies to continuously refine research. ## What You Bring to the Table - **5+ years** of experience in security research, vulnerability discovery, and offensive security. - Deep expertise in reverse engineering, exploit development, and software vulnerability analysis. - Strong understanding of software supply chain security (package management, CI/CD pipelines, dependency analysis). - Experience discovering and responsibly disclosing zero-day vulnerabilities. - Proven track record publishing high-quality research and/or presenting at top security conferences (e.g., Black Hat, DEF CON, RSAC, BSides). - Proficiency in Python, Rust, or Go. - Strong analytical skills and ability to conduct complex research autonomously. - Excellent written and verbal communication. ## Why Endor Labs We’re building at the intersection of developer productivity and security—one of the fastest-growing areas in software. You’ll work with a world-class team pushing the boundaries of security research and directly influenc
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.