Drimva

Endor Labs

Program Analysis Engineer

$160K–$220K

Palo Alto, CA +1 · Full-time · Posted Apr 30, 2026

Location
Palo Alto, CA
Palo Alto, California, United States
Experience
No specific number of years stated.

About the job

Contribute to Endor Labs’ static-analysis, SCA, SAST, and machine-learning-for-code systems to detect and prioritize software vulnerabilities and deliver production-scale analysis.

What you'll do

  • Improve static-analysis tools and program-analysis infrastructure, including call graphs, data-flow and taint analysis, and language-specific analyzers.
  • Participate in ML experiments for SCA and SAST, from dataset work and evaluation through productionization.
  • Collaborate across engineering, product, and research to address customer needs, improve reliability and performance, and shape technical plans.

What they ask for

  • Experience with program analysis or static analysis, or with ML for code; deep expertise or working familiarity and willingness to learn are welcome.
  • Software engineering background through industry experience, research, open source, or a combination.
  • Comfort with at least one of Java, Python, or Go, and ability to ship production-quality code or develop that ability quickly.
  • Product mindset and good communication and collaboration skills.

Nice to have

  • Familiarity with AppSec, DevSecOps, or software supply chain security.
  • Production ML systems experience, open-source contributions in analysis or security research, early-stage startup experience, or developer-product experience.

Pay

$160,000 - $220,000 USD; compensation range (may include additional incentives such as commission targets, restricted stock units, and/or bonuses, depending on the role).

Tools

Java, Python, Go

AI focus

Participate in machine-learning experiments for vulnerability detection and prioritization in SCA and SAST, including dataset work, evaluation, and moving prototypes toward production.

Model-written summary · the original posting is authoritative

First seen Oct 29, 2026 · Last verified Nov 4, 2026 (UTC)