Remote opportunity at
Endor LabsSenior Security Researcher
Endor Labs is seeking a Senior Security Researcher to concentrate on offensive security research focused on software supply chain security. The organization builds a platform designed…
Career Tools
About This Role
Endor Labs is seeking a Senior Security Researcher to concentrate on offensive security research focused on software supply chain security. The organization builds a platform designed to secure code generated by AI agents through visibility, code context graphs, and actionable fixes. This remote full-time role places the successful candidate at the forefront of the secure software development lifecycle, where they will investigate zero-day vulnerabilities, study evolving threat patterns, and shape…
Job Description
Endor Labs is seeking a Senior Security Researcher to concentrate on offensive security research focused on software supply chain security. The organization builds a platform designed to secure code generated by AI agents through visibility, code context graphs, and actionable fixes. This remote full-time role places the successful candidate at the forefront of the secure software development lifecycle, where they will investigate zero-day vulnerabilities, study evolving threat patterns, and shape upcoming security features within company products.
This position is suited for professionals with a strong background in application security, reverse engineering, and offensive security techniques who enjoy sharing their findings publicly via white papers, blogs, and conference presentations. The organization is backed by prominent investors and serves major clients across industries. Endor Labs operates as an equal opportunity employer that values diverse perspectives.
Responsibilities
- Perform offensive security investigations targeting software supply chain vectors to find and analyze zero-day vulnerabilities.
- Build and improve exploit methods to comprehend modern attack techniques against CI/CD pipelines, third-party libraries, and software code.
- Partner with Product Management to turn research insights into functional security features for company offerings.
- Disseminate discovery results via white papers, technical blog posts, and industry security events.
- Work alongside developers and security engineers to build and test detection and mitigation approaches for new threats.
- Contribute open-source frameworks, tools, or methodologies to the wider security community to bolster software supply chain defenses.
- Monitor active threats, adversary tactics, and security shifts to continuously adjust research priorities.
Requirements
- Minimum of five years of background in vulnerability discovery, offensive security, and security research.
- Expertise in software vulnerability analysis, reverse engineering, and exploit creation.
- Thorough understanding of software supply chain security, dependency analysis, package management systems, and CI/CD workflows.
- Prior experience finding and responsibly reporting zero-day vulnerabilities.
- Demonstrated history of publishing high-tier research or speaking at major security conferences such as Black Hat, DEF CON, RSAC, or BSides.
- Proficiency in coding languages like Go, Rust, or Python.
- Strong analytical capabilities to execute complex security investigations independently.
- Written and verbal communication skills capable of explaining technical topics to varied audiences.
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the remote work policy for this role?
The posting specifies that the location is remote.
What is the employment type?
The position is full-time.
What experience level is required for applicants?
Candidates must have at least five years of experience in security research, vulnerability discovery, and offensive security.
Does the posting specify the salary?
No, the salary is not stated in the job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.