Senior Security Researcher

Does offensive research into software supply chain security for Endor Labs, working remotely in the US. The researcher hunts for zero-day vulnerabilities in software packages and CI/CD systems, develops exploit techniques for malicious code and compromised dependencies, prototypes detections with engineers, and works with product management to turn findings into product features.

Publishing is central: blogs, white papers, conference talks and open-source tools. Endor Labs wants five years in security research and offensive security, deep reverse engineering and exploit development, knowledge of package ecosystems and CI/CD, responsibly disclosed zero-days, a record of talks at events such as Black Hat or DEF CON, and Python, Rust or Go.