Senior Security Researcher
Core
Conduct offensive security research on software supply chain threats, identifying and analyzing zero-day vulnerabilities in software artifacts and CI/CD systems.
Role type
Senior Security Researcher (Offensive Security / Supply Chain)
Builds
Innovative security capabilities within Endor Labs' products for securing AI-driven software development workflows.
Domain
Software Supply Chain Security / AI Security / Offensive Security
Required skills
Reverse engineering, Exploit development, Software vulnerability analysis, CI/CD pipeline security, Dependency analysis, Zero-day vulnerability discovery, Programming in Python/Rust/Go, Technical writing, Public speaking at security conferences
Preferred skills
Experience with malicious code analysis, 3rd party library security, Open-source tool development
Technologies
Python, Rust, Go, CI/CD systems, Package management systems
Responsibilities
Identify and analyze zero-day vulnerabilities in software artifacts and CI/CD systems, Develop and refine exploit techniques to understand modern attack vectors, Translate research findings into innovative security capabilities, Publish research findings through blogs, white papers, and conferences, Collaborate to prototype detection and mitigation strategies, Contribute to the security community via open-source tools
Seniority
Senior, hands-on IC
