Founding Principal Product Security Engineer

Endor Labs; Boston (MA); On-site; USD 180,000 - 240,000; Full time

Job summary

Endor Labs in Boston is seeking a founding Principal Product Security Engineer to shape security strategy across the platform. You will work with the Head of Security to align supply chain security, code scanning, and runtime monitoring with the product roadmap.

You will build threat models, guide design reviews, and deploy security agents that improve quality and scale. The role requires 10+ years in security, hands-on experience with LLMs and agents, and the ability to influence senior

Qualifications

• 10+ years in application or product security, including staff- or principal-level leadership.
• Experience building security tooling and automation at scale across an engineering organization.
• Proven track record influencing a product or platform roadmap.
• Hands-on work applying LLMs and agents to security problems.
• Deep threat modeling and secure architecture skills.
• Ability to set direction and influence senior stakeholders without formal authority.
• Fix-it mindset and remediation focus over reporting.

Responsibilities

• Define and drive security strategy for the Endor Labs platform.
• Cover supply chain security, first-party code scanning, and runtime monitoring.
• Deploy agents to improve quality and scale in each area.
• Collaborate with Product and Engineering to solve customer problems and shape the roadmap.
• Share what works with customers, prospects and the broader security community.

Skills

Security leadership

Tooling automation

Threat modeling

Roadmap influence

LLMs in security

Stakeholder comms

Fast-moving env

Tools

Security tooling

CI/CD security

Static/dynamic analysis

Job description

Endor Labs in Boston is seeking a founding Principal Product Security Engineer to shape security strategy across the platform. You will work with the Head of Security to align supply chain security, code scanning, and runtime monitoring with the product roadmap.

You will build threat models, guide design reviews, and deploy security agents that improve quality and scale. The role requires 10+ years in security, hands-on experience with LLMs and agents, and the ability to influence senior