Senior Security Researcher

The role

A Senior Security Researcher will conduct offensive security research on software supply chain threats. This person will identify zero-day vulnerabilities and translate findings into security capabilities for Endor Labs products.

What you will do

• Conduct offensive security research on software supply chain threats.
• Identify and analyze zero-day vulnerabilities.
• Develop and refine exploit techniques for modern attack vectors.
• Translate research findings into security capabilities within products.
• Publish research findings through blogs, white papers, and conferences.
• Collaborate with security engineers and developers to prototype detection and mitigation strategies.
• Contribute to the security community by developing open-source tools, methodologies, or frameworks.
• Stay ahead of latest threats and attacker methodologies.

Required qualifications

• 5+ years of experience in security research, vulnerability discovery, and offensive security.
• Deep expertise in reverse engineering, exploit development, and software vulnerability analysis.
• Strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis.
• Experience discovering and responsibly disclosing zero-day vulnerabilities.
• Proven track record of publishing high-quality research or presenting at top security conferences.
• Proficiency in programming languages such as Python, Rust, or Go.
• Strong analytical skills and the ability to conduct complex security research autonomously.
• Excellent communication skills, both written and verbal.

About the company

Endor Labs builds a platform to secure the software supply chain. The company was founded by Varun Badhwar and has raised $163M from investors including Lightspeed and Salesforce Ventures.