Program Analysis Engineer
About The Position
Endor Labs is seeking a Program Analysis Engineer to join their engineering organization. This individual contributor role focuses on static analysis and ML-for-code initiatives. The engineer will contribute to the existing suite of static analysis tools, help evolve the SCA (Software Composition Analysis) and SAST (Static Application Security Testing) platforms, and shape machine-learning experiments for detection and prioritization capabilities. The role involves partnering with engineering, product, and research peers to translate customer needs into production systems that run at scale. This position is ideal for engineers interested in programming languages, code analysis, applying ML to code and AppSec problems, and thriving in a fast-paced startup environment. The role is based in Palo Alto, California, with a hybrid work model requiring 3 days per week onsite.
Requirements
- Experience with program analysis or static analysis (e.g., call graphs, data-flow or taint analysis, abstract interpretation, symbolic execution) or ML for code (e.g., vulnerability detection, code representation learning, program repair, code embeddings, reachability prediction, LLM-based code understanding). Deep expertise in one area is great; a working familiarity and eagerness to learn is also welcome.
- A software engineering background—industry experience, research, open source, or a mix.
- Comfort working in at least one of Java, Python, or Go, and the ability to ship production-quality code (or the trajectory to get there quickly).
- A product mindset—caring about building things that work well for users, not just technically interesting code.
- Good communication and collaboration skills; ability to work through technical trade-offs with teammates and explain thinking clearly.
Nice To Haves
- Interest in giving talks at technical conferences, workshops, or industry events, or in engaging directly with customers.
- Familiarity with AppSec, DevSecOps, or software supply chain security.
- Experience with ML systems in production (training pipelines, evaluation frameworks, model serving, feedback loops).
- Contributions to open-source static analysis tools, program analysis frameworks, or security research.
- Experience at an early-stage startup or as a founding engineer.
- Experience building developer-facing products or platforms.
Responsibilities
- Contribute to existing static analysis tools, improving precision, recall, coverage, and performance across supported languages.
- Evolve SCA and SAST platforms, influencing how vulnerabilities are detected, dependencies are analyzed, and risk is prioritized across the software supply chain.
- Participate in machine-learning experiments for SCA and SAST, covering problem framing, dataset work, evaluation, and the transition from prototype to production.
- Contribute to the program-analysis infrastructure, including call graph construction, data-flow and taint analysis, and language-specific analyzers.
- Collaborate with product and engineering to shape the technical roadmap for analysis and ML-for-code work.
- Engage in design discussions, code reviews, and hands-on pairing with engineers across the team.
- Represent Endor Labs externally through talks at technical conferences, meetups, or industry events, if desired.
- Engage with customers to triage findings, explain analysis behavior, and translate field feedback into product improvements.
- Identify and address performance bottlenecks, reliability issues, and technical debt across the analysis stack.
Benefits
- Compensation range: $160,000 - $220,000
- Potential for additional incentives such as commission targets, restricted stock units, and/or bonuses, depending on the role.
- Opportunities for professional development and growth in a fast-growing space.
- A culture that values ownership, customer success, data-driven decisions, and collaboration.
- Equal Opportunity Employer status with a commitment to diversity and inclusion.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
