{"id":49213,"url":"https://alion.io/job/endorlabs-senior-product-security-engineer","title":"Senior Product Security Engineer","company":{"id":8066,"name":"Endor Labs","domain":"endorlabs.com","url":"https://alion.io/company/endorlabs","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":90,"open_postings":18,"ghost_share":0,"stale_share":0.389,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":51000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Bazel","optional":false},{"name":"CI/CD","optional":false},{"name":"Least Privilege","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C++","optional":true}],"status":"live","first_seen_at":"2026-08-10T04:22:38Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-18T09:39:25Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":69},"description":"Who We Are\nEndor Labs is building the Application Security platform for the software development revolution. Modern software is complex and dependency-rich, making it increasingly difficult to pinpoint the risks that truly matter. Endor Labs solves this challenge by building a call graph of your entire software estate-enabling teams to clearly identify, prioritize, and fix critical risks faster.\nTrusted by companies that are one or one hundred years old, Endor Labs secures code whether it was written by humans or AI, and whether it's 40-year-old C++ code or cutting-edge Bazel Monorepos. Endor Labs was founded by serial entrepreneurs Varun Badhwar and Dimitri Stiliadis, and is backed by leading VC firms such as Dell Technology Capital, Lightspeed, and Sierra Ventures.\nSound interesting? Let’s talk if you want to be part of the next big leap in security innovation!\nHow You'll Make an Impact\nThis is an early, high-ownership role where you'll be one of the first dedicated members of our Security team and own application security end to end. Your charter is to secure the Endor Labs application from code to artifact to runtime-including the agents driving our AI SDLC and our platform itself.\nAs an Application Security company, you’ll also be customer zero of our product, using it firsthand and helping shape the roadmap in the process. You’ll partner closely with the Head of Security & IT, as well as our engineering and product teams.\nOwn software supply chain security, including defenses against risks from open-source packages, third-party binaries, container base images, build tools, and other software dependencies.\nOwn first-party software security, including code and container scanning, automated security testing in CI, external penetration tests, and the integrity and provenance of software we build and publish.\nHarden our AI agents by enforcing least-privilege access across MCP, credentials, filesystem, and network resources, while maintaining visibility into agent inventory and activity.\nOwn and run the responsible disclosure program, including triaging external reports, maintaining submission quality standards, and scaling the review process.\nPartner with engineering teams from concept through implementation to conduct security design reviews, define secure architectures, and ensure security best practices are followed.\nHelp shape and evolve Endor Labs’ application security program as one of its earliest dedicated security team members.\nWhat You Bring to the Table\nIf you are excited about building an application security program from the ground up and enjoy working at the intersection of security, engineering, and AI, we would love to talk to you!\n5+ years of experience in application security or product security, with strong hands-on experience across application security fundamentals.\nAt least 2 years of experience working with the security implications of agentic software development, with a strong understanding of how to capture its benefits while managing associated risks.\nStrong experience with threat modeling and secure architecture design.\nPractical experience securing build systems and CI/CD pipelines at scale; experience with Bazel monorepos is a strong plus.\nHands-on experience running penetration tests end-to-end and triaging bug bounty or responsible disclosure submissions.\nStrong ability to investigate, understand, and remediate security issues rather than simply identifying and reporting them.\nComfortable working in ambiguous, fast-moving environments and defining priorities without an established playbook.\nRelentlessly curious with an attacker mindset and the ability to dig deep into how systems work and identify root causes.\nStrong collaboration and communication skills, with the ability to build trust and work effectively with engineering and product teams.\nWillingness to be a customer zero of our security platform, provide thoughtful feedback, and help influence the product roadmap.\nWhy Endor Labs\nWe’re building at the intersection of developer productivity and security - one of the fastest-growing spaces in software. Our dev-loved platform has real ROI, strong momentum, and customers who care about doing things right.\nAt Endor Labs, we think big, start small, and learn fast. We take ownership, move with purpose, and always start with the customer’s success. We debate with data, make the complex simple, and challenge each other with kindness and candor. We celebrate wins, learn from misses, and have fun along the way - because when our customers win, we all win.\nEndor Labs is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment, and we believe in the power of diverse perspectives and experiences. Even if you don't fit every requirement above, we encourage all talented individuals to apply-there's no one-size-fits-all here.","description_format":"text","description_chars":4888,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-08-10T04:22:38Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.627,"p_room":0.36,"age_days":68,"expected_fill_days":37,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/endorlabs-senior-product-security-engineer","json_url":"https://alion.io/job/endorlabs-senior-product-security-engineer.json","meta":{"generated_at":"2026-10-18T12:40:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18725,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8066},"rest":"https://alion.io/mcp/rest/get_company?id=8066"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fendorlabs-senior-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fendorlabs-senior-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fendorlabs-senior-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/endorlabs-senior-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fendorlabs-senior-product-security-engineer"}]}