Senior Product Security Engineer
Core
Building an end-to-end application security program for a SaaS platform, securing code, artifacts, runtime, and AI agents.
Role type
Senior IC product security engineer (application security)
Builds
Endor Labs application security platform and secure software supply chain
Domain
Application security, AI security, software supply chain
Deliverable
production ML models | product features | infrastructure
Required skills
application security fundamentals, threat modeling, secure architecture design, CI/CD pipeline security, penetration testing, responsible disclosure triage, software supply chain security, agentic software security
Preferred skills
Bazel monorepos experience, AI SDLC security
Technologies
Bazel, CI/CD pipelines, MCP, container scanning tools
Responsibilities
Own software supply chain security (open-source, third-party binaries, containers); Own first-party software security (code/container scanning, CI testing, pen tests); Harden AI agents (least-privilege, access control); Run responsible disclosure program; Partner with engineering on security design reviews; Shape the application security program.
Seniority
Senior, hands-on IC
