Senior Product Security Engineer
Endor Labsabout 3 hours ago
Responsibilities
- Own software supply chain security, including risks from open-source packages, third-party binaries, container base images, build tools, and other software dependencies.
- Own first-party software security, including code and container scanning, automated security testing, external penetration tests, and software integrity and provenance.
- Harden AI agents by enforcing least-privilege access across MCP, credentials, filesystem, and network resources while maintaining agent inventory and activity visibility.
- Run the responsible disclosure program, including triaging external reports, maintaining submission quality standards, and scaling the review process.
- Partner with engineering teams on security design reviews, secure architectures, and security best practices from concept through implementation.
- Help establish and evolve Endor Labs’ application security program as an early dedicated security team member.
- Use Endor Labs’ product firsthand as customer zero and help shape its roadmap.
Requirements
- At least 5 years of application security or product security experience with strong hands-on application security fundamentals.
- At least 2 years of experience with the security implications of agentic software development.
- Strong experience with threat modeling and secure architecture design.
- Practical experience securing build systems and CI/CD pipelines at scale; Bazel monorepo experience is a strong plus.
- Hands-on experience running end-to-end penetration tests and triaging bug bounty or responsible disclosure submissions.
- Ability to investigate, understand, and remediate security issues, not merely identify and report them.
- Ability to work in ambiguous, fast-moving environments and define priorities without an established playbook.
- Attacker mindset, curiosity, and ability to investigate systems deeply and identify root causes.
- Strong collaboration and communication skills for building trust with engineering and product teams.
- Willingness to use Endor Labs’ security platform as a customer zero, provide feedback, and influence the product roadmap.
Benefits
- Equal Opportunity Employer with a commitment to diversity and inclusion.