Senior Security Researcher (Fully Remote)

Endor Labs; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Endor Labs, a growing security company with a collaborative culture, is seeking senior security researchers to identify and mitigate threats in software supply chains. You will pioneer exploit techniques, collaborate with Product Management, and share findings at conferences and in publications.

Join a world-class team that values ownership, data-driven decisions, and continuous learning while protecting AI-generated code and complex enterprise ecosystems.

Qualifications

• 5+ years of experience in security research, vulnerability discovery, and offensive security.
• Deep expertise in reverse engineering, exploit development, and software vulnerability analysis.
• Strong understanding of software supply chain security, including CI/CD pipelines and dependency analysis.
• Proficiency in Python, Rust, or Go, and excellent communication skills.
• Work at the intersection of developer productivity and security with a world-class team.

Responsibilities

• Conduct offensive security research on software supply chain threats and identify zero-day vulnerabilities.
• Develop exploit techniques and work with Product Management to enhance security products.
• Publish research findings through blogs, white papers, and security conferences.
• Collaborate with engineers to prototype detection and mitigation strategies.

Skills

Security research

Vulnerability discovery

Reverse engineering

Exploit development

CI/CD security

Python/ Rust/ Go

Tools

Python

Rust

Go

Job description

• Conduct offensive security research on software supply chain threats and identify zero-day vulnerabilities.
• Develop exploit techniques and work with Product Management to enhance security products.
• Publish research findings through blogs, white papers, and security conferences.
• Collaborate with engineers to prototype detection and mitigation strategies.

Requirements:

• 5+ years of experience in security research, vulnerability discovery, and offensive security.
• Deep expertise in reverse engineering, exploit development, and software vulnerability analysis.
• Strong understanding of software supply chain security, including CI/CD pipelines and dependency analysis.
• Proficiency in Python, Rust, or Go, and excellent communication skills.
• Work at the intersection of developer productivity and security with a world-class team.
• Influence the security of modern software supply chains and directly impact customer success.
• Enjoy a culture of ownership, data-driven decisions, and continuous learning.

Endor Labs secures AI-generated code by providing vulnerability detection and remediation for software supply chains. They are a growing security company with a collaborative, customer-focused culture, backed by $163M in funding and serving major enterprises.