Senior Security Researcher: Supply Chain Exploits

Endor Labs; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

Endor Labs, a growing security company with a collaborative culture, is seeking senior security researchers to identify and mitigate threats in software supply chains. You will pioneer exploit techniques, collaborate with Product Management, and share findings at conferences and in publications.

Join a world-class team that values ownership, data-driven decisions, and continuous learning while protecting AI-generated code and complex enterprise ecosystems.

Qualifications

• 5+ years of experience in security research, vulnerability discovery, and offensive security.
• Deep expertise in reverse engineering, exploit development, and software vulnerability analysis.
• Strong understanding of software supply chain security, including CI/CD pipelines and dependency analysis.
• Proficiency in Python, Rust, or Go, and excellent communication skills.
• Work at the intersection of developer productivity and security with a world-class team.

Responsibilities

• Conduct offensive security research on software supply chain threats and identify zero-day vulnerabilities.
• Develop exploit techniques and work with Product Management to enhance security products.
• Publish research findings through blogs, white papers, and security conferences.
• Collaborate with engineers to prototype detection and mitigation strategies.

Skills

Security research

Vulnerability discovery

Reverse engineering

Exploit development

CI/CD security

Python/ Rust/ Go

Tools

Python

Rust

Go

Job description

Endor Labs, a growing security company with a collaborative culture, is seeking senior security researchers to identify and mitigate threats in software supply chains. You will pioneer exploit techniques, collaborate with Product Management, and share findings at conferences and in publications.

Join a world-class team that values ownership, data-driven decisions, and continuous learning while protecting AI-generated code and complex enterprise ecosystems.