Senior Security Researcher

Endor Labs

2d

About The Position

Endor Labs is seeking a Senior Security Researcher to join its offensive security research efforts in software supply chain security. The role focuses on identifying zero-day vulnerabilities in software artifacts and CI/CD systems, analyzing attack trends, and helping shape future security capabilities in Endor Labs products. It requires deep expertise in vulnerability research, application security, reverse engineering, and offensive security. The researcher will also publish research through blogs and white papers and present at security conferences.

The role works with Product Management, security engineers, and developers to translate research findings into product capabilities and to prototype detection and mitigation strategies. It also contributes to the security community through open-source tools, methodologies, or frameworks, while tracking emerging threats and attacker techniques.

Requirements

• At least 5 years of experience in security research, vulnerability discovery, and offensive security.
• Deep expertise in reverse engineering, exploit development, and software vulnerability analysis.
• Strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis.
• Experience discovering and responsibly disclosing zero-day vulnerabilities.
• Track record of publishing high-quality research or presenting at top security conferences.
• Proficiency in programming languages such as Python, Rust, or Go.
• Strong analytical skills and ability to conduct complex security research autonomously.
• Excellent written and verbal communication skills for conveying technical concepts to diverse audiences.

Responsibilities

• Conduct offensive security research on software supply chain threats and identify and analyze zero-day vulnerabilities.
• Develop and refine exploit techniques to understand attack vectors involving malicious code, third-party libraries, and CI/CD systems.
• Work with Product Management to translate research findings into security capabilities in Endor Labs products.
• Publish research through technical blogs, white papers, and security conferences.
• Collaborate with security engineers and developers to prototype and implement detection and mitigation strategies for emerging threats.
• Develop open-source tools, methodologies, or frameworks that enhance software supply chain security.
• Monitor threats, attacker methodologies, and evolving security trends to refine research efforts.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed