Program Analysis Engineer
Endor Labs2 months ago
Palo Alto, CA, USAMid Level
H1B Sponsor
Responsibilities
- Improve the precision, recall, coverage, and performance of static analysis tools.
- Evolve SCA and SAST platforms for vulnerability detection, dependency analysis, and software supply-chain risk prioritization.
- Participate in ML-for-code experiments, including problem framing, dataset work, evaluation, and productionization.
- Contribute to call graph construction, data-flow and taint analysis, and language-specific analyzer infrastructure.
- Collaborate with engineering, product, and research peers on technical roadmaps and production systems.
- Participate in design discussions, code reviews, and hands-on pairing.
- Identify and address performance bottlenecks, reliability issues, and technical debt.
- Engage with customers to triage findings, explain analysis behavior, and incorporate field feedback.
- Optionally represent Endor Labs at technical conferences, meetups, or industry events.
Requirements
- Experience with program analysis or static analysis, such as call graphs, data-flow analysis, taint analysis, abstract interpretation, or symbolic execution, or with ML for code, such as vulnerability detection, code representation learning, program repair, code embeddings, reachability prediction, or LLM-based code understanding.
- A software engineering background from industry, research, open source, or a combination of these.
- Comfort working in at least one of Java, Python, or Go and the ability or trajectory to ship production-quality code.
- A product mindset focused on building useful user-facing systems.
- Strong communication and collaboration skills.
- Preferred familiarity with AppSec, DevSecOps, or software supply-chain security.
- Preferred experience with production ML systems, including training pipelines, evaluation frameworks, model serving, or feedback loops.
- Preferred contributions to open-source static analysis tools, program analysis frameworks, or security research.
- Experience at an early-stage startup, as a founding engineer, or building developer-facing products and platforms is a plus.
Benefits
- Hybrid work model with three days per week onsite in Palo Alto, California.
- Opportunities to give talks and engage with customers and the broader technical community.
- Equal opportunity employer committed to an inclusive workplace.
About Endor Labs
Endor Labs is the AppSec platform built for the AI era. It helps teams find, prioritize, and fix the most critical risks in code, whether written by humans or AI—faster. Endor Labs understands the entire structure of your codebase, from 40 year-old C++ to modern Bazel monorepos. Powered by AI agents and the industry's richest security dataset about open source code, Endor Labs doesn’t just flag issues, it reduces noise, prioritizes what matters most, and proposes intelligent remediations based on the context of your code. Whether you’re an upstart or in the Fortune 500, Endor Labs helps AppSec and development teams eliminate noisy alerts, fix code 6.2x faster, and stay compliant with standards like FedRAMP, PCI, SLSA, and NIST SSDF.