Senior Product Security Engineer

📋 Description

• Own software supply chain security across OSS, binaries, and containers.
• Own first-party security: code/container scanning, CI security tests, external pentests.
• Harden AI agents with least-privilege access and inventory visibility.
• Run responsible disclosure program; triage external reports and scale reviews.
• Partner with engineering for security design reviews and secure architectures.
• Help shape and evolve Endor Labs’ security program as an early security team member.

🎯 Requirements

• 5+ years in application security with hands-on fundamentals.
• ≥2 years in agentic software security implications and risk management.
• Strong threat modeling and secure architecture design.
• Experience securing build systems and CI/CD; Bazel monorepos a plus.
• Hands-on penetration testing end-to-end and bug bounty triage.
• Ability to investigate, remediate, and root-cause security issues.

🎁 Benefits

• Join a fast-moving, security-forward team at an early stage.
• Customer-zero mindset; influence product roadmap with security at the core.
• Equal Opportunity Employer; diverse, inclusive culture.