← All roles

Staff Product Security Engineer

Endor Labs· Engineering
Apply on company site
Remotefull-timePosted 4d ago

About the role

Founding principal-level security leadership role focused on building and executing Endor Labs' security strategy across the platform, including supply chain security, code scanning, runtime monitoring, AI agent hardening, threat modeling, and design reviews. Works closely with Head of Security & IT and cross-functional teams to influence roadmaps, validate designs, and improve product security for customers.

Responsibilities

  • Fix issues in our application. AI tooling generates findings; validate, prioritize, and fix findings at scale to drive a customer-facing platform.
  • Stop insecure code from being merged. Build out internal security SAST tooling and pave paths so engineers and citizen developers can trust code contributions.
  • Shaped by collaboration with Product and Engineering to solve customer problems, influence roadmap, review designs and mocks, and provide implementation feedback.
  • Share learnings with customers, prospects, and the broader security community.
  • Run application security for the product, using Endor Labs’ platform as an incubator for R&D and a proving ground for the product.

Qualifications

  • 10+ years in application or product security, including staff- or principal-level technical leadership.
  • Track record of building security tooling and automation at scale across an engineering organization, with measurable impact.
  • Track record of influencing a product or platform roadmap; internal security work adopted by other teams or customers.
  • Hands-on experience applying LLMs and agents to security problems; built a harness, compared tools, or measured failures; well-reasoned opinions on AI code security: finding, validating, and fixing vulnerabilities and preventing insecure code from being merged.
  • Deep threat modeling and secure architecture skills; belief that threat modeling is a major lever in AI-driven scanning.
  • Ability to set direction and influence senior engineering, product and customer stakeholders without formal authority.
  • Fix-it mindset: investigate, find root causes, and drive remediation rather than just reporting.
  • Comfort building from scratch in ambiguous, fast-moving environments; ability to set priorities without an established playbook.

Skills

Required:Application security leadershipSecurity tooling and automation at scaleThreat modeling and secure architectureLLMs and AI agent security experienceCross-functional influence and leadership without formal authority
Last updated Oct 22, 2026. Interested? Apply on the company site.

About Endor Labs

AI-Native Application Security Platform

Endor Labs is an application security platform built for AI-generated and human-written code, helping teams prioritize and fix real risk across the SDLC.

application securityAI-generated codesoftware supply chainsecurity analysissoftware development
Company profileWebsite

More open roles at Endor Labs