Staff Product Security Engineer

Endor Labs

3d

About The Position

As Endor Labs’ founding Principal Product Security Engineer, you will work closely with the Head of Security & IT to set and execute security strategy for the Endor Labs platform. The work spans supply chain security, first-party code scanning, runtime monitoring, AI agent hardening, threat modeling, design reviews, and deploying agents to improve quality and scale.

You will help validate, prioritize, and fix application security findings at scale, and build internal processes around Endor Labs’ AI SAST product to prevent insecure code from being merged. The company’s application security program uses its own platform as a proving ground for the product and an incubator for research and development. You will partner with Product and Engineering to shape the roadmap, review designs and mocks, provide implementation feedback, and share effective approaches with customers, prospects, and the wider security community.

Requirements

• 10+ years of experience in application or product security, including staff- or principal-level technical leadership.
• Track record of building security tooling and automation that operates at scale across an engineering organization and measuring its effectiveness.
• Track record of influencing a product or platform roadmap and turning internal security work into something adopted by other teams or customers.
• Hands-on experience applying LLMs and agents to security problems, such as building a harness, comparing tools, or measuring where they fail.
• Well-reasoned views on finding, validating, and fixing vulnerabilities in existing code, and preventing insecure code from being merged.
• Deep threat modeling and secure architecture skills.
• Ability to set direction and influence senior engineering, product, and customer stakeholders without formal authority.
• A fix-it mindset: investigate root causes and drive remediation rather than only reporting issues.
• Comfort building from scratch in an ambiguous, fast-moving environment and setting priorities without an established playbook.

Nice To Haves

• Experience securing build systems and CI/CD at scale, especially Bazel monorepos.
• Background in security research, such as vulnerability research, program analysis, or static analysis tooling.
• Conference talks, publications, or open-source work in application security.

Responsibilities

• Set and execute security strategy for the Endor Labs platform in partnership with the Head of Security & IT.
• Address supply chain security, first-party code scanning, runtime monitoring, AI agent hardening, threat modeling, and design reviews.
• Deploy agents to improve quality and scale across security areas.
• Validate, prioritize, and drive fixes for application security findings at scale.
• Build internal processes around the company’s AI SAST product and establish paved paths to help prevent insecure code from being merged.
• Use the company’s platform in its internal application security program as a proving ground for product development and research.
• Work with Product and Engineering to shape the roadmap, review designs and mocks, and provide implementation feedback.
• Share successful approaches with customers, prospects, and the broader security community.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed