Endor Labs provides a software supply-chain security platform analyzing open-source and AI-generated code for reachable vulnerabilities, integrating via IDE/CI plugins, and offering fixes, SBOMs, artifact signing, and pipeline monitoring.
<h1><strong>Senior Corporate Security Engineer (US)</strong></h1> <h2><strong>About Us</strong></h2> <p>Endor Labs is building the premium Application Security platform for the software development revolution. Modern software is complex and dependency-rich, making it increasingly difficult to pinpoint the risks that truly matter. Endor Labs solves this challenge by building a call graph of your entire software estate—enabling teams to clearly identify, prioritize, and fix critical risks faster. </p> <p>Trusted by companies that are one or one hundred years old, Endor Labs secures code whether it was written by humans or AI, and whether it's 40-year old C++ code or cutting edge Bazel Monorepos. Endor Labs was founded by serial entrepreneurs Varun Badhwar and Dimitri Stiliadis, and is backed by leading VC firms such as Dell Technology Capital, Lightspeed, and Sierra Ventures.</p> <p>Sound interesting? Let’s talk if you want to be part of the next big leap in security innovation!</p> <p><strong>How You’ll Make an Impact</strong></p> <p><strong>Endpoint security</strong></p> <ul> <li>Own the security posture of our Mac fleet: CrowdStrike EDR deployment, tuning, and detection coverage; endpoint hardening baselines; and compliance monitoring. </li> <li>You'll partner with IT (who owns device management and MDM) to make sure our security requirements are reflected in how devices are provisioned and maintained, but the security bar and its enforcement are yours.</li> </ul> <p><strong>Corporate identity</strong></p> <ul> <li>Own identity and access as our security foundation. </li> <li>Harden and administer our Google Workspace identity layer and SSO, drive strong authentication (MFA/phishing-resistant factors), design and enforce least-privilege access across our SaaS estate, and build sane joiner/mover/leaver access controls in partnership with IT and People.</li> </ul> <p><strong>SaaS security posture</strong></p> <ul> <li>Establish and maintain security posture across our SaaS applications - configuration hardening, third-party app and OAuth governance, data-sharing controls, and continuous monitoring for drift. You'll decide what "good" looks like for our critical SaaS and hold the line on it.</li> </ul> <p><strong>Email security</strong></p> <ul> <li>Own the security of our email environment. Harden Gmail / Google Workspace against phishing and account compromise.</li> </ul> <p><strong>What You Bring to the Table</strong></p> <ul> <li>5+ years in security engineering, with meaningful depth in corporate / enterprise security (identity, endpoint, SaaS, and detection & response).</li> <li>Experience:</li> <ul> <li>Administering Google Workspace (or a comparable IdP such as Okta/Entra) and driving SSO, MFA, and least-privilege access at scale.</li> <li>Managing security of a macOS fleet and tuning EDR tooling.</li> <li>Ensuring corporate telemetry (identity, endpoint, SaaS) is well-instrumented and flowing into a SIEM/logging platform, plus hands-on comfort writing detections and participating in incident response.</li> <li>Using AI thoughtfully and responsibly to accelerate your work and provide a better “security experience” for stakeholders. </li> </ul> </ul> <p><strong>What Makes Us... Us</strong></p> <ul> <li>Go to extraordinary lengths to distinguish ourselves through world-class work.</li> <li>Prioritize quality over speed, and speed over scope.</li> <li>Desire to work with deeply kind, mission-driven people.</li> <li>Strive to make the complex simple.</li> <li>Use first principles to debate ideas, test assumptions, and make decisions.</li> <li>Seek the truth by putting data above opinions.</li> <li>Assume good intent and give tactical feedback to help each other get better.</li> <li>Hold no ego—when our customers win, we all win.</li> </ul> <p><strong>What We Offer You</strong></p> <ul> <li>Competitive salary and comprehensive benefits package including Health, Dental, Vision and Mental Health plans. </li> <li>401(k) plan to support your long-term financial goals.</li> <li>Flexible PTO to maintain a healthy work-life balance (we want you here for the long-haul!)</li> <li>Opportunities for co-working and team meetups to foster collaboration.</li> <li>A dog-friendly office environment for those who love to bring their fur babies along.</li> </ul> <p><strong>Endor Labs is an Equal Opportunity Employer.</strong> We celebrate diversity and are committed to creating an inclusive environment for all employees. Even if you don't fit every requirement above, we believe in the power of diverse perspectives and experiences, so we encourage all talented individuals to apply—there's no one-size-fits-all here.</p> <p><strong>Compensation: </strong>For candidates who receive an offer for this position, the compensation range is expected to be between $150,000 - $180,000. This may include additional incentives such as commission targets, restricted stock units, and/or bonuses, depending on the role.</p>