← All roles

Senior Product Security Engineer

Endor Labs· Engineering
Apply on company site
Bengalurufull-timePosted 2mo ago

About the role

Senior, high-ownership security role focused on building and owning Endor Labs' application security program end-to-end, including software supply chain, first-party security, AI agent hardening, disclosure program, and security design reviews.

Responsibilities

  • Own software supply chain security, including defenses against risks from open-source packages, third-party binaries, container base images, build tools, and other software dependencies.
  • Own first-party software security, including code and container scanning, automated security testing in CI, external penetration tests, and the integrity and provenance of software we build and publish.
  • Harden our AI agents by enforcing least-privilege access across MCP, credentials, filesystem, and network resources, while maintaining visibility into agent inventory and activity.
  • Own and run the responsible disclosure program, including triaging external reports, maintaining submission quality standards, and scaling the review process.
  • Partner with engineering teams from concept through implementation to conduct security design reviews, define secure architectures, and ensure security best practices are followed.
  • Help shape and evolve Endor Labs’ application security program as one of its earliest dedicated security team members.

Qualifications

  • 5+ years of experience in application security or product security, with strong hands-on experience across application security fundamentals.
  • At least 2 years of experience working with the security implications of agentic software development, with a strong understanding of how to capture its benefits while managing associated risks.
  • Strong experience with threat modeling and secure architecture design.
  • Practical experience securing build systems and CI/CD pipelines at scale; experience with Bazel monorepos is a strong plus.
  • Hands-on experience running penetration tests end-to-end and triaging bug bounty or responsible disclosure submissions.
  • Strong ability to investigate, understand, and remediate security issues rather than simply identifying and reporting them.
  • Comfortable working in ambiguous, fast-moving environments and defining priorities without an established playbook.
  • Relentlessly curious with an attacker mindset and the ability to dig deep into how systems work and identify root causes.
  • Strong collaboration and communication skills, with the ability to build trust and work effectively with engineering and product teams.
  • Willingness to be a customer zero of our security platform, provide thoughtful feedback, and help influence the product roadmap.

Skills

Required:Application securityAgentic software securityThreat modelingCI/CD securityPenetration testingVulnerability disclosure
Last updated Oct 15, 2026. Interested? Apply on the company site.

About Endor Labs

AI-Native Application Security Platform

Endor Labs is an application security platform built for AI-generated and human-written code, helping teams prioritize and fix real risk across the SDLC.

application securityAI-generated codesoftware supply chainsecurity analysissoftware development
Company profileWebsite

More open roles at Endor Labs