Senior Product Security Engineer
Core
Building an end-to-end application security program for a software development platform, securing code, artifacts, runtime, and AI agents.
Role type
Senior IC product security engineer (application security)
Builds
Endor Labs application security program, secure software supply chain, and hardened AI agents
Domain
Application security, AI security, software supply chain
Required skills
application security fundamentals, agentic software development security, threat modeling, secure architecture design, CI/CD pipeline security, penetration testing, responsible disclosure triage, root cause analysis
Preferred skills
Bazel monorepos experience, building security programs from scratch
Technologies
Bazel, CI/CD pipelines, MCP, container scanning tools
Responsibilities
Own software supply chain security (open-source, third-party binaries, containers); own first-party software security (code/container scanning, CI testing, pen tests); harden AI agents with least-privilege access; run responsible disclosure program; partner with engineering on security design reviews; shape the application security program
Seniority
Senior, hands-on IC
