Senior Security Researcher

🔥 2 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Endor Labs

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2022

🔐 Security

☁️ SaaS

🔒 Cybersecurity

💰 Seed Round on 2022-11

Security • SaaS • Cybersecurity

Endor Labs is a company specializing in software supply chain security and software composition analysis (SCA). The company provides tools and solutions to help organizations manage, prioritize, and remediate open source software risks and vulnerabilities. It offers a comprehensive platform that includes reachability-based SCA, artifact signing, container scanning, and Static Application Security Testing (SAST). Endor Labs aims to improve developer productivity by reducing false positive alerts and focusing on actionable risks. They also support compliance efforts for standards such as FedRAMP and PCI DSS. The company integrates with popular platforms such as GitHub and Azure, offering features to optimize CI/CD pipelines and manage software bills of materials (SBOMs).

📋 Description

• Conduct offensive security research on software supply chain threats and identify and analyze zero-day vulnerabilities • Develop and refine exploit techniques for attack vectors involving malicious code, third-party libraries, and CI/CD systems • Work with Product Management to translate research findings into security capabilities within Endor Labs products • Publish research through technical blogs, white papers, and leading security conferences • Collaborate with security engineers and developers to prototype and implement detection and mitigation strategies • Develop open-source tools, methodologies, or frameworks that enhance software supply chain security • Monitor emerging threats, attacker methodologies, and evolving security trends

🎯 Requirements

• 5+ years of experience in security research, vulnerability discovery, and offensive security • Deep expertise in reverse engineering, exploit development, and software vulnerability analysis • Strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis • Experience discovering and responsibly disclosing zero-day vulnerabilities • Proven track record of publishing high-quality research or presenting at top security conferences (e.g., Black Hat, DEF CON, RSAC, BSides) • Proficiency in programming languages such as Python, Rust, or Go • Strong analytical skills and ability to conduct complex security research autonomously • Excellent written and verbal communication skills • Endor Labs encourages talented individuals to apply even if they do not fit every listed requirement

🏖️ Benefits

• Equal Opportunity Employer committed to diversity and an inclusive environment • World-class team environment • Opportunity to directly influence the security of modern software supply chains