Staff Product Security Engineer

🔥 12 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Endor Labs

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2022

🔐 Security

☁️ SaaS

🔒 Cybersecurity

💰 Seed Round on 2022-11

Security • SaaS • Cybersecurity

Endor Labs is a company specializing in software supply chain security and software composition analysis (SCA). The company provides tools and solutions to help organizations manage, prioritize, and remediate open source software risks and vulnerabilities. It offers a comprehensive platform that includes reachability-based SCA, artifact signing, container scanning, and Static Application Security Testing (SAST). Endor Labs aims to improve developer productivity by reducing false positive alerts and focusing on actionable risks. They also support compliance efforts for standards such as FedRAMP and PCI DSS. The company integrates with popular platforms such as GitHub and Azure, offering features to optimize CI/CD pipelines and manage software bills of materials (SBOMs).

📋 Description

• Set and execute the security strategy for the Endor Labs platform with the Head of Security & IT • Lead supply chain security, first-party code scanning, runtime monitoring, AI agent hardening, threat modeling, and design reviews • Deploy agents to improve quality and scale across security areas • Validate, prioritize, and fix application security findings at scale • Build internal capabilities around the AI SAST product • Establish paved paths to prevent insecure code from being merged • Run the application security program using Endor Labs' own platform • Work with Product and Engineering to shape the roadmap, review designs and mocks, and provide implementation feedback • Share successful approaches with customers, prospects, and the broader security community

🎯 Requirements

• 10+ years in application or product security, including staff- or principal-level technical leadership • Track record of building security tooling and automation that runs at scale across an engineering organization, and measuring whether it works • Track record of influencing a product or platform roadmap and turning internal security work into adoption by other teams or customers • Demonstrated hands-on work applying LLMs and agents to security problems • Experience building a harness, comparing tools, or measuring where they fail • Well-reasoned opinions on finding, validating, and fixing vulnerabilities in existing code and preventing insecure code from being merged • Deep threat modeling and secure architecture skills • Ability to set direction and influence senior engineering, product, and customer stakeholders without formal authority • Fix-it mindset involving root-cause investigation and remediation • Comfort building from scratch in an ambiguous, fast-moving environment and setting priorities without an established playbook • Experience securing build systems and CI/CD at scale, especially Bazel monorepos (nice-to-have) • Background in security research, vulnerability research, program analysis, or static analysis tooling (nice-to-have) • Conference talks, publications, or open-source work in application security (nice-to-have)

🏖️ Benefits

• Equal Opportunity Employer committed to creating an inclusive environment