Staff Product Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and implement the security strategy for the Endor Labs platform in collaboration with the Head of Security & IT.

• Oversee supply chain security, first-party code scanning, runtime monitoring, AI agent hardening, threat modeling, and design reviews.

• Deploy agents to enhance quality and scalability across various security domains.

• Assess, prioritize, and remediate application security issues at scale.

• Cultivate internal expertise related to the AI SAST product.

• Create established pathways to prevent insecure code from being integrated.

• Manage the application security program utilizing Endor Labs' own platform.

• Collaborate with Product and Engineering to influence the roadmap, review designs and mockups, and provide feedback for implementation.

• Share successful strategies with customers, prospects, and the wider security community.

⛳️ Requirements

• 10+ years of experience in application or product security, including senior or principal-level technical leadership.

• Proven experience in developing security tools and automation that operate at scale within an engineering organization, along with metrics to assess their effectiveness.

• Demonstrated ability to influence a product or platform roadmap and encourage the adoption of internal security initiatives by other teams or customers.

• Hands-on experience applying LLMs and agents to address security challenges.

• Familiarity with building a harness, evaluating tools, or analyzing their shortcomings.

• Well-founded perspectives on identifying, validating, and resolving vulnerabilities in existing code and preventing insecure code from being merged.

• Strong skills in threat modeling and secure architecture.

• Capability to set direction and influence senior engineering, product, and customer stakeholders without formal authority.

• Proactive mindset focusing on root-cause analysis and remediation.

• Comfortable creating solutions from the ground up in a dynamic, fast-paced environment and setting priorities without a predefined playbook.

• Experience in securing build systems and CI/CD processes at scale, particularly with Bazel monorepos (nice-to-have).

• Background in security research, vulnerability research, program analysis, or static analysis tooling (nice-to-have).

• Engagement in conference talks, publications, or open-source contributions in the field of application security (nice-to-have).

🏝️ Benefits

• Equal Opportunity Employer committed to creating an inclusive environment.