Staff Product Security Engineer

present of AI; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Endor Labs is seeking a founding security leader to shape the company’s security direction—from supply chain and code scanning to hardening AI agents and design reviews. The right candidate will have a decade or more in application security, built tooling that scales company-wide, and demonstrated success turning lessons into product roadmaps.

As AI agents write code, this role creates guardrails, tests agents, and guides threat models to ensure secure software at scale.

Qualifications

• Has a decade or more in application security and a track record of building tooling that scales across engineering teams.
• Ability to translate security findings into product improvements and drive fixes.
• Experience with threat modeling, design reviews, and security guardrails for AI-enabled code bases.

Responsibilities

• Define and lead the security direction for the company’s product.
• Build and scale security tooling and automation used across engineering teams.
• Translate internal security lessons into the product roadmap and prioritize fixes over reporting issues.
• Review designs and conduct threat modeling to reduce risk in AI-generated code and deployments.

Skills

Application security

Threat modeling

Security automation

Code review

Tooling development

Tools

Code scanning tooling

AI security tooling

Job description

This is a founding security hire who sets direction for how the company protects its own product, from supply chain and code scanning to hardening AI agents and reviewing designs. A strong candidate has a decade or more in application security, has built tooling that runs across a whole engineering team, and can show it worked. They also turn internal lessons into input for the product roadmap and push fixes through instead of only reporting problems.

How it fits the AI era

AI agents now write code faster than people can review it, so the hard part has shifted from finding issues to checking, ranking and fixing them at scale. This role builds agents and guardrails that do that work and stop weak code from being merged. Judgment about threat models, trade-offs and what matters to customers stays human.

How it builds AI experience

The work puts hands-on AI security practice at the center, since the company's own AI code scanning product is used internally as a proving ground. Someone in this seat would test where agents succeed and fail at finding and fixing flaws, and design safe paths for both engineers and non-engineers who contribute code. Candidates can prepare by building a small test harness, comparing AI scanning tools and writing up the results, including what did not work.

Worth showing

• Security automation at scale
• Threat modeling and design review
• LLM and agent security harnesses
• Public writing or talks
• Root cause fixes and remediation

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

Per the company, Endor Labs provides an agentic application security platform that secures AI-generated code, open source dependencies, and containers.