Senior Security Researcher: Software Supply Chain & Offense

Endor Labs; United States; On-site; USD 150,000 - 230,000; Full time

Job summary

Endor Labs is seeking a Senior Security Researcher to join our offensive security research efforts in software supply chain security. This role identifies zero-day vulnerabilities in software artifacts and CI/CD systems, analyzes attack trends, and influences the next generation of security capabilities in our products.

This role requires deep expertise in vulnerability research, reverse engineering, and offensive security techniques.

Qualifications

• 5+ years of experience in security research, vulnerability discovery, and offensive security.
• Deep expertise in reverse engineering, exploit development, and software vulnerability analysis.
• Strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis.
• Experience discovering and responsibly disclosing zero-day vulnerabilities.
• Proficiency in programming languages such as Python, Rust, or Go.
• Strong analytical and autonomous research abilities.
• Excellent communication skills, both written and verbal.

Responsibilities

• Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities.
• Develop and refine exploit techniques to understand modern attack vectors targeting software supply chain through malicious code, 3rd party libraries, and CI/CD systems.
• Translate research findings into innovative security capabilities within Endor Labs' products.
• Publish research findings through technical blogs, white papers, and industry-leading security conferences.
• Collaborate with security engineers and developers to prototype and implement detection and mitigation strategies for emerging threats.
• Contribute to the security community by developing open-source tools, methodologies, or frameworks that enhance software supply chain security.
• Stay ahead of the latest threats and attacker methodologies to continually refine research efforts.

Skills

Security research

Reverse engineering

Exploit development

Vulnerability analysis

Zero-day disclosures

Python

Rust

Go

Communication

Job description

Endor Labs is seeking a Senior Security Researcher to join our offensive security research efforts in software supply chain security. This role identifies zero-day vulnerabilities in software artifacts and CI/CD systems, analyzes attack trends, and influences the next generation of security capabilities in our products.

This role requires deep expertise in vulnerability research, reverse engineering, and offensive security techniques.