Staff Product Security Engineer

The founding principal product security engineer at Endor Labs, the application security company, working with the Head of Security and IT to set security strategy for its own platform. The engineer covers supply chain security, code scanning, runtime monitoring, AI agent hardening and threat modelling, with two priorities: validating and fixing findings at scale, and stopping insecure code from being merged using the company's own AI SAST product.

Because the internal program runs on Endor's platform, the role also shapes the product roadmap and speaks with customers. It needs ten years in application or product security at staff level or above, security automation at scale, hands-on LLM and agent work on security problems, and deep threat modelling. Remote in the US.