← All roles

Security Engineer - Vulnerability

Endor Labs· Engineering
Apply on company site
Bengalurufull-timePosted 1mo ago

About the role

Role focused on advancing Endor Labs' proprietary vulnerability database, improving AI-driven vulnerability pipelines, triaging and enriching vulnerability data, and communicating findings externally.

Responsibilities

  • The primary focus of this position is to help the team further advance Endor Labs' proprietary vulnerability database — extending and improving our existing AI pipelines, e.g., in the areas of automated vulnerability validation, reachability analysis, and exploit generation.
  • Monitor and manage pipelines that triage, enrich, and prioritize vulnerabilities at scale, working with standards and data sources (CVE, CWE, CVSS, EPSS, PURL, NVD, OSV, GHSA, VEX) and continuously improving data accuracy, coverage, and timeliness.
  • Work with 0-day researchers to scale automated vulnerability discovery — turning manual research workflows into repeatable, production-grade systems.
  • Investigate high-impact vulnerabilities and the vulnerability landscape, and author external-facing content (blog posts, technical write-ups, advisories) for technical and non-technical audiences.
  • Collaborate with internal teams to feed findings into detection and analysis pipelines, enrich the vulnerability database, and improve automated coverage over time.

Qualifications

  • Bachelor's degree in engineering or related field
  • at least 3 years of hands-on professional experience in vulnerability research, vulnerability management, product security, or application security
  • Extensive knowledge of software vulnerabilities and standards/technologies (CVE, CWE, CVSS, EPSS, PURLs, NVD, OSV, VEX, SBOM formats)
  • Hands-on experience building production-grade solutions at enterprise scale (CI/CD automation, SAST/SCA findings management, or similar security tooling)
  • Experience shipping AI/agentic systems to production (LLM pipelines, agent frameworks, tool use, prompt/evaluation design) with measurable output quality
  • Proficiency in reading/analyzing code across Python, JavaScript/TypeScript, Java, Go; ability to reason about patches, root causes, exploitability
  • Experience producing external security communications (blogs, advisories, technical reports)

Skills

Required:Vulnerability research and managementCI/CD automationSAST/SCA toolingAI/agentic systems

Benefits

  • Not specified in text
Last updated Oct 15, 2026. Interested? Apply on the company site.

About Endor Labs

AI-Native Application Security Platform

Endor Labs is an application security platform built for AI-generated and human-written code, helping teams prioritize and fix real risk across the SDLC.

application securityAI-generated codesoftware supply chainsecurity analysissoftware development
Company profileWebsite

More open roles at Endor Labs