← All roles

Senior Security Researcher

Endor Labs· Engineering
Apply on company site
Hybrid (Bengaluru)full-timePosted 6mo ago

About the role

Senior Security Researcher focusing on detection, triage, and analysis of malicious open source software components, with responsibilities spanning malware alert triage, IoCs review, in-depth technical analysis, external communications, and collaboration to improve detection pipelines and threat databases.

Responsibilities

  • The primary tasks of this position relate to the detection, triage, and analysis of malicious open source software components — identifying threats across public package ecosystems (npm, PyPI, Maven, etc.) and assessing their scope, intent, and impact.
  • Day-to-day work includes triaging and assessing incoming malware alerts, reviewing Indicators of Compromise (IoCs), and maintaining threat campaign records to track attacker infrastructure, tactics, and patterns over time.
  • A core responsibility is the in-depth technical analysis of suspicious packages: reverse-engineering obfuscated code, identifying malicious behaviors (exfiltration, backdoors, dependency confusion, typosquatting, etc.), and producing detailed internal assessments.
  • You will author and publish external-facing content — blog posts, technical write-ups, and security advisories — communicating findings clearly to both technical and non-technical audiences, and contributing to the broader security community's awareness of emerging threats.
  • You will collaborate with internal teams to feed findings into detection pipelines, enrich our vulnerability and threat database, and help improve automated detection coverage over time.

Qualifications

  • Bachelor's degree in engineering or a related field, with at least 3 years of hands-on professional experience specifically in malware analysis, threat intelligence, or open source package security
  • Demonstrated experience triaging security alerts at scale and working within or alongside a SOC or threat intelligence team
  • Hands-on experience reviewing and interpreting IoCs (file hashes, domains, IPs, behavioral signatures) and maintaining threat campaign tracking
  • Proficiency in reading and analyzing code across multiple languages (Python, JavaScript/TypeScript, Java, Go) — including obfuscated or minified code
  • Experience producing external security communications: blog posts, advisories, or technical reports intended for a public or customer-facing audience
  • Understanding of package manager ecosystems and common attack patterns (typosquatting, dependency confusion, malicious install scripts, etc.)

Skills

Required:Malware analysisIoC review & trackingCode analysis across languages

Benefits

  • (Not explicitly listed in the provided description)
Last updated Oct 15, 2026. Interested? Apply on the company site.

About Endor Labs

AI-Native Application Security Platform

Endor Labs is an application security platform built for AI-generated and human-written code, helping teams prioritize and fix real risk across the SDLC.

application securityAI-generated codesoftware supply chainsecurity analysissoftware development
Company profileWebsite

More open roles at Endor Labs