Staff Product Security Engineer
Endor Labs13 hours ago
Responsibilities
- Set and execute the security strategy for the Endor Labs platform.
- Build and operate scalable security tooling and automation across the engineering organization.
- Validate, prioritize, and remediate application vulnerabilities at scale.
- Develop practices and paved paths that prevent insecure code from being merged.
- Apply LLMs and agents to security problems, including vulnerability discovery, validation, and remediation.
- Lead supply chain security, first-party code scanning, runtime monitoring, AI agent hardening, threat modeling, and secure design reviews.
- Influence product and platform roadmaps by partnering with Product and Engineering.
- Share security practices and learnings with customers, prospects, and the broader security community.
Requirements
- 10+ years of experience in application or product security, including staff- or principal-level technical leadership.
- Track record of building security tooling and automation that operates at scale across an engineering organization and measuring its effectiveness.
- Track record of influencing product or platform roadmaps and driving adoption of internal security work.
- Hands-on experience applying LLMs and agents to security problems, including building harnesses, comparing tools, or measuring failures.
- Deep threat-modeling and secure-architecture skills.
- Ability to set direction and influence senior engineering, product, and customer stakeholders without formal authority.
- Experience investigating root causes and driving remediation rather than only reporting issues.
- Ability to build from scratch and set priorities in an ambiguous, fast-moving environment.
- Preferred experience securing build systems and CI/CD at scale, especially Bazel monorepos.
- Preferred background in security research, vulnerability research, program analysis, or static-analysis tooling.
- Conference talks, publications, or open-source application-security work are preferred.
Benefits
- Equal Opportunity Employer committed to diversity and an inclusive environment.
- Fast-growing work at the intersection of developer productivity and security with a customer-focused culture.
Tech Stack
Bazel
Categories
About Endor Labs
Endor Labs builds an application security platform that maps code and dependencies to prioritize and remediate risks across the SDLC for AppSec and engineering teams. It supports SCA, SAST, container scanning, and software supply chain controls, including code produced by humans or AI. Founded in 2021 and headquartered in Palo Alto, it is privately held and sells to enterprises through multi-stakeholder security and engineering buyers.