Senior Security Researcher

Endor Labs

. Conduct offensive security research on software supply chain threats and identify and analyze zero-day vulnerabilities .

Posted 10/27/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates deep expertise in offensive security research, vulnerability discovery, and software supply chain security, with a strong focus on reverse engineering and exploit development. Proven ability to publish high-quality research and collaborate effectively with cross-functional teams to enhance security capabilities.

Highest-signal resume keywords

Offensive Security ResearchExploit DevelopmentSoftware Supply Chain SecurityZero-Day Vulnerability DiscoveryProgramming in Python, Rust, or Go

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Reverse EngineeringExploit DevelopmentVulnerability AnalysisDependency AnalysisMalicious Code TechniquesCI/CD SystemsThreat MonitoringSecurity ResearchDetection StrategiesMitigation Strategies

Soft Skills

Analytical SkillsWritten CommunicationVerbal Communication

Tools & Technologies

Open-Source ToolsSecurity FrameworksPackage Management Systems

Industry Keywords

Zero-Day VulnerabilitiesSecurity ConferencesTechnical BlogsWhite PapersEmerging Threats

Tech Stack

Tools & technologies

PythonRustGo

About the role

Key responsibilities & impact

Conduct offensive security research on software supply chain threats and identify and analyze zero-day vulnerabilities
Develop and refine exploit techniques for attack vectors involving malicious code, third-party libraries, and CI/CD systems
Work with Product Management to translate research findings into security capabilities within Endor Labs products
Publish research through technical blogs, white papers, and leading security conferences
Collaborate with security engineers and developers to prototype and implement detection and mitigation strategies
Develop open-source tools, methodologies, or frameworks that enhance software supply chain security
Monitor emerging threats, attacker methodologies, and evolving security trends

Requirements

What you’ll need

5+ years of experience in security research, vulnerability discovery, and offensive security
Deep expertise in reverse engineering, exploit development, and software vulnerability analysis
Strong understanding of software supply chain security, including package management systems, CI/CD pipelines, and dependency analysis
Experience discovering and responsibly disclosing zero-day vulnerabilities
Proven track record of publishing high-quality research or presenting at top security conferences (e.g., Black Hat, DEF CON, RSAC, BSides)
Proficiency in programming languages such as Python, Rust, or Go
Strong analytical skills and ability to conduct complex security research autonomously
Excellent written and verbal communication skills
Endor Labs encourages talented individuals to apply even if they do not fit every listed requirement

Benefits

Comp & perks

Equal Opportunity Employer committed to diversity and an inclusive environment
World-class team environment
Opportunity to directly influence the security of modern software supply chains