Senior Security Researcher

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform offensive security research focused on threats within the software supply chain, including the identification and analysis of zero-day vulnerabilities.

• Create and enhance exploit techniques for attack vectors that involve malicious code, third-party libraries, and CI/CD systems.

• Collaborate with Product Management to convert research insights into security features within Endor Labs' products.

• Disseminate research findings through technical blogs, white papers, and presentations at prominent security conferences.

• Partner with security engineers and developers to prototype and deploy detection and mitigation strategies.

• Create open-source tools, methodologies, or frameworks that bolster software supply chain security.

• Stay updated on emerging threats, attack methodologies, and evolving security trends.

⛳️ Requirements

• A minimum of 5 years of experience in security research, vulnerability discovery, and offensive security.

• Extensive knowledge in reverse engineering, exploit development, and software vulnerability assessment.

• Strong grasp of software supply chain security, encompassing package management systems, CI/CD pipelines, and dependency analysis.

• Experience in discovering and responsibly disclosing zero-day vulnerabilities.

• Demonstrated success in publishing high-quality research or presenting at leading security conferences (e.g., Black Hat, DEF CON, RSAC, BSides).

• Proficient in programming languages such as Python, Rust, or Go.

• Strong analytical abilities and the capacity to conduct intricate security research independently.

• Exceptional written and verbal communication skills.

• Endor Labs welcomes talented candidates to apply even if they do not meet all specified requirements.

🏝️ Benefits

• Equal Opportunity Employer dedicated to diversity and fostering an inclusive environment.

• Collaborative, world-class team atmosphere.

• Opportunity to make a direct impact on the security of modern software supply chains.