Endor Labs
Senior Security Researcher
Remote US +1 · Remote · Senior · Full-time · Posted Oct 27, 2026
- Location
- Remote US
US Remote - Experience
- 5+ years in security research, vulnerability discovery, and offensive security.
About the job
Conduct offensive security research into software supply chain threats, find vulnerabilities, and help turn research into product security capabilities.
What you'll do
- Research software supply chain threats and identify zero-day vulnerabilities in software artifacts and CI/CD systems.
- Develop exploit techniques and collaborate with product, engineering, and development teams on detection and mitigation strategies.
- Publish research and contribute tools or methodologies to the security community.
What they ask for
- Deep expertise in reverse engineering, exploit development, and software vulnerability analysis.
- Strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis.
- Experience discovering and responsibly disclosing zero-day vulnerabilities.
- Proficiency in Python, Rust, or Go.
Nice to have
- Track record of publishing research or presenting at security conferences such as Black Hat, DEF CON, RSAC, or BSides.
Tools
Python, Rust, Go
Model-written summary · the original posting is authoritative