Staff Product Security Engineer

The role

As the founding Staff Product Security Engineer, you will work with the Head of Security & IT to set and execute the security strategy for the Endor Labs platform. You will handle supply chain security, code scanning, runtime monitoring, threat modeling, and design reviews.

What you will do

• Set and execute the security strategy for the Endor Labs platform
• Manage supply chain security, first-party code scanning, and runtime monitoring
• Perform threat modeling and design reviews
• Deploy agents to improve quality and scale
• Validate, prioritize, and fix findings at scale
• Build internal apparatus around the AI SAST product
• Set up paved paths for secure code contributions
• Shape the product roadmap and review designs and mocks
• Give feedback on implementation
• Share findings with customers, prospects, and the security community

Required qualifications

• 10+ years in application or product security, including staff- or principal-level technical leadership
• Track record of building security tooling and automation that runs at scale
• Track record of influencing a product or platform roadmap
• Demonstrated hands-on work applying LLMs and agents to security problems
• Deep threat modeling and secure architecture skills
• Ability to set direction and influence senior engineering, product and customer stakeholders without formal authority
• A fix-it mindset to investigate, find root causes, and drive remediation
• Comfort building from scratch in an ambiguous, fast-moving environment

Nice to have

• Experience securing build systems and CI/CD at scale, especially Bazel monorepos
• A background in security research, such as vulnerability research, program analysis, or static analysis tooling
• Conference talks, publications, or open-source work in application security

About the company

Endor Labs provides a code context graph that maps code, open source, containers and infrastructure to identify and fix vulnerabilities. The company was founded by the creator of Prisma Cloud and has raised $163M.