Senior Security Engineer - Vulnerability

About the role

Senior Security Engineer - Vulnerability at Endor Labs. The primary focus of this position is to help the team further advance Endor Labs'proprietary vulnerability database — extending and improving our existing AI pipelines.

What you'll do

• E.g., in the areas of automated vulnerability validation, reachability analysis, and exploit generation
• Day-to-day work includes monitoring and managing pipelines that triage, enrich, and prioritize vulnerabilities at scale, working with the standards and data sources the
• Ecosystem is built on (CVE, CWE, CVSS, EPSS, PURL, NVD, OSV, GHSA, VEX) and continuously improving the accuracy, coverage, and timeliness of our data
• Work hand-in-hand with our world-class 0-day researchers to scale automated vulnerability discovery — turning manual research workflows into repeatable
• Investigate high-impact vulnerabilities and the vulnerability landscape at large, and author external-facing content — blog posts, technical write-ups, and advisories —

What you need

• 5–9 yrs of experience
• Vulnerability assessment
• Python
• CI/CD
• LLMs
• JavaScript
• TypeScript
• B.Tech or B.E.

Good to have

• Java
• Go