Program Analysis Engineer
Endor Labs4 months ago
Palo Alto, CA, USAMid Level
H1B sponsor
Responsibilities
- Improve the precision, recall, coverage, and performance of static analysis tools.
- Evolve SCA and SAST platforms for vulnerability detection, dependency analysis, and software supply-chain risk prioritization.
- Participate in ML-for-code experiments, including problem framing, dataset work, evaluation, and productionization.
- Contribute to call graph construction, data-flow and taint analysis, and language-specific analyzer infrastructure.
- Collaborate with engineering, product, and research peers on technical roadmaps and production systems.
- Participate in design discussions, code reviews, and hands-on pairing.
- Identify and address performance bottlenecks, reliability issues, and technical debt.
- Engage with customers to triage findings, explain analysis behavior, and incorporate field feedback.
- Optionally represent Endor Labs at technical conferences, meetups, or industry events.
Requirements
- Experience with program analysis or static analysis, such as call graphs, data-flow analysis, taint analysis, abstract interpretation, or symbolic execution, or with ML for code, such as vulnerability detection, code representation learning, program repair, code embeddings, reachability prediction, or LLM-based code understanding.
- A software engineering background from industry, research, open source, or a combination of these.
- Comfort working in at least one of Java, Python, or Go and the ability or trajectory to ship production-quality code.
- A product mindset focused on building useful user-facing systems.
- Strong communication and collaboration skills.
- Preferred familiarity with AppSec, DevSecOps, or software supply-chain security.
- Preferred experience with production ML systems, including training pipelines, evaluation frameworks, model serving, or feedback loops.
- Preferred contributions to open-source static analysis tools, program analysis frameworks, or security research.
- Experience at an early-stage startup, as a founding engineer, or building developer-facing products and platforms is a plus.
Benefits
- Hybrid work model with three days per week onsite in Palo Alto, California.
- Opportunities to give talks and engage with customers and the broader technical community.
- Equal opportunity employer committed to an inclusive workplace.
About Endor Labs
Endor Labs builds an application security platform that maps code and dependencies to prioritize and remediate risks across the SDLC for AppSec and engineering teams. It supports SCA, SAST, container scanning, and software supply chain controls, including code produced by humans or AI. Founded in 2021 and headquartered in Palo Alto, it is privately held and sells to enterprises through multi-stakeholder security and engineering buyers.