This role is based in Palo Alto, California, and follows a hybrid work model. If you’re excited about helping build a large-scale SaaS platform at an early-stage company and the qualifications below align with your background, we’d love to connect!

About Us

Endor Labs is building the Application Security platform for the software development revolution. Modern software is complex and dependency-rich, making it increasingly difficult to pinpoint the risks that truly matter. Endor Labs solves this challenge by building a call graph of your entire software estate—enabling teams to clearly identify, prioritize, and fix critical risks faster. 

Trusted by companies that are one or one hundred years old, Endor Labs secures code whether it was written by humans or AI, and whether it's 40-year old C++ code or cutting edge Bazel Monorepos. Endor Labs was founded by serial entrepreneurs Varun Badhwar and Dimitri Stiliadis, and is backed by leading VC firms such as Dell Technology Capital, Lightspeed, and Sierra Ventures.

Sound interesting? Let’s talk if you want to be part of the next big leap in security innovation!

About the Role

We are looking for a Member of Technical Staff with an interest in program analysis, static analysis, or machine learning for code, to join our engineering organization. This is an individual contributor role focused on our static analysis and ML-for-code initiatives.

As an MTS, you will contribute to our existing suite of static analysis tools, help evolve our SCA (Software Composition Analysis) and SAST (Static Application Security Testing) platforms, and help shape machine-learning experiments that power the next generation of our detection and prioritization capabilities. You will partner closely with engineering, product, and research peers to translate customer needs into production systems that run at scale.

This role is a good fit for engineers who enjoy working on programming languages and code analysis, who are curious about applying ML techniques to real-world code and AppSec problems, and who thrive in a fast-paced startup environment.

How You'll Make an Impact

• Contribute to our existing suite of static analysis tools, helping improve precision, recall, coverage, and performance across supported languages.
• Help evolve our SCA and SAST platforms, shaping how we detect vulnerabilities, analyze dependencies, and prioritize risk across the software supply chain.
• Participate in machine-learning experiments for SCA and SAST, from problem framing and dataset work through evaluation and the path from prototype to production.
• Contribute to our program-analysis infrastructure, which includes call graph construction, data-flow and taint analysis, and language-specific analyzers.
• Work with product and engineering to help shape parts of the technical roadmap for analysis and ML-for-code work.
• Collaborate with engineers across the team through design discussions, code reviews, and hands-on pairing.
• Opportunities to represent Endor Labs externally—e.g., talks at technical conferences, meetups, or industry events—if that's something you enjoy.
• Engage with customers when needed—triaging findings, explaining analysis behavior, and turning field feedback into product improvements.
• Help identify and address performance bottlenecks, reliability issues, and technical debt across the analysis stack.

What You Bring to the Table

• Some exposure to program analysis or static analysis (e.g., call graphs, data-flow or taint analysis, abstract interpretation, symbolic execution) or to ML for code (e.g., vulnerability detection, code representation learning, program repair, code embeddings, reachability prediction, LLM-based code understanding). Deep expertise in one area is great; a working familiarity and eagerness to learn is also welcome.
• A software engineering background—industry experience, research, open source, or a mix.
• Comfort working in at least one of Java, Python, or Go, and the ability to ship production-quality code (or the trajectory to get there quickly).
• Some relevant experience in software engineering or a related field. We're open to a range of backgrounds and career stages, from early-career engineers through experienced ICs.
• A product mindset—you care about building things that work well for users, not just technically interesting code.
• Good communication and collaboration skills. You can work through technical trade-offs with teammates and explain your thinking clearly.

Bonus Points

• Interest in giving talks at technical conferences, workshops, or industry events, or in engaging directly with customers. Neither is required.
• Familiarity with AppSec, DevSecOps, or software supply chain security.
• Experience with ML systems in production (training pipelines, evaluation frameworks, model serving, feedback loops).
• Contributions to open-source static analysis tools, program analysis frameworks, or security research.
• Experience at an early-stage startup or as a founding engineer.
• Experience building developer-facing products or platforms.

Why Endor Labs

We’re building at the intersection of developer productivity and security — one of the fastest-growing spaces in software. Our dev-loved platform has real ROI, strong momentum, and customers who care about doing things right.

At Endor Labs, we think big, start small, and learn fast. We take ownership, move with purpose, and always start with the customer’s success. We debate with data, make the complex simple, and challenge each other with kindness and candor. We celebrate wins, learn from misses, and have fun along the way — because when our customers win, we all win.

Endor Labs is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Even if you don't fit every requirement above, we believe in the power of diverse perspectives and experiences, so we encourage all talented individuals to apply—there's no one-size-fits-all here.

Compensation

For candidates who receive an offer for this position, the compensation range is expected to be between $90,000 - $130,000. This may include additional incentives such as commission targets, restricted stock units, and/or bonuses, depending on the role.

This role is based in Palo Alto, California, and follows a hybrid work model. If you’re excited about helping build a large-scale SaaS platform at an early-stage company and the qualifications below align with your background, we’d love to connect!

About Us

Endor Labs is building the Application Security platform for the software development revolution. Modern software is complex and dependency-rich, making it increasingly difficult to pinpoint the risks that truly matter. Endor Labs solves this challenge by building a call graph of your entire software estate—enabling teams to clearly identify, prioritize, and fix critical risks faster. 

Trusted by companies that are one or one hundred years old, Endor Labs secures code whether it was written by humans or AI, and whether it's 40-year old C++ code or cutting edge Bazel Monorepos. Endor Labs was founded by serial entrepreneurs Varun Badhwar and Dimitri Stiliadis, and is backed by leading VC firms such as Dell Technology Capital, Lightspeed, and Sierra Ventures.

Sound interesting? Let’s talk if you want to be part of the next big leap in security innovation!

The Role

We are looking for a Principal Member of Technical Staff to join our engineering organization as a cross-cutting technical leader. This is a pure individual contributor role with significant architectural influence. You will work across teams to tackle our hardest backend scaling, reliability, and security product challenges.

As a Principal MTS, you will set technical direction, drive architecture evolution, and raise the bar for engineering quality across the organization. You will partner closely with engineering leadership, product, and other senior technologists to translate business and customer needs into scalable, high-performance systems.

This role is ideal for someone who has built and scaled security products before, thrives in a fast-paced startup environment, and has the rare combination of deep backend expertise and strong product instincts.

How You'll Make an Impact

• Architect and evolve the core backend platform, including microservices, async processing pipelines, and data infrastructure.
• Drive technical strategy and make high-impact design decisions that affect the entire product and engineering organization.
• Design and build high-performance, reliable SaaS services that process security data at scale with low latency and high throughput.
• Lead cross-team technical initiatives, collaborating with and through other senior engineers to ship complex features.
• Mentor and elevate senior engineers through architecture reviews, design discussions, and hands-on pairing.
• Partner with product leadership to shape the technical roadmap, balancing customer needs with long-term platform health.
• Identify and resolve systemic performance bottlenecks, reliability risks, and technical debt across the stack.
• Contribute directly to code in Go, working within our Kubernetes-based infrastructure backed by MongoDB and Postgres.

What you Bring to the Table

• 15+ years of software engineering experience with a strong backend focus. You have designed and built distributed systems, microservices architectures, and async workload processing at scale.
• Security product expertise. You have built or architected application security products before. Deep familiarity with AppSec, DevSecOps, or software supply chain security is strongly preferred.
• Strong product sense. You understand how to build SaaS products that are performant, reliable, and solve real customer problems. You think beyond the code to the user experience and business impact.
• Proficiency in Go with production experience in Kubernetes, MongoDB, and/or PostgreSQL. Familiarity with React on the frontend is a plus.
• Technical leadership at scale. You have set technical direction for engineering organizations, driven architecture decisions, and worked effectively with and through other senior technical leaders.
• Excellent communication and collaboration skills. You can motivate engineers, build consensus on technical approaches, and clearly articulate complex trade-offs to both technical and non-technical stakeholders.

Bonus Points

• Experience as a founding engineer or early-stage startup employee, where you built systems from zero to production.
• Track record of building and scaling developer-facing products or platforms.
• Background in startup environments with the scrappiness and ownership mindset that comes with it.
• Contributions to open-source security tooling or research.

Why Endor Labs

We’re building at the intersection of developer productivity and security — one of the fastest-growing spaces in software. Our dev-loved platform has real ROI, strong momentum, and customers who care about doing things right.

At Endor Labs, we think big, start small, and learn fast. We take ownership, move with purpose, and always start with the customer’s success. We debate with data, make the complex simple, and challenge each other with kindness and candor. We celebrate wins, learn from misses, and have fun along the way — because when our customers win, we all win.

Endor Labs is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Even if you don't fit every requirement above, we believe in the power of diverse perspectives and experiences, so we encourage all talented individuals to apply—there's no one-size-fits-all here.

Compensation

For candidates who receive an offer for this position, the compensation range is expected to be between $220,000 - $300,000. This may include additional incentives such as commission targets, restricted stock units, and/or bonuses, depending on the role.

About Us

Endor Labs is building the Application Security platform for the software development revolution. Modern software is complex and dependency-rich, making it increasingly difficult to pinpoint the risks that truly matter. Endor Labs solves this challenge by building a call graph of your entire software estate—enabling teams to clearly identify, prioritize, and fix critical risks faster. 

Trusted by companies that are one or one hundred years old, Endor Labs secures code whether it was written by humans or AI, and whether it's 40-year old C++ code or cutting edge Bazel Monorepos. Endor Labs was founded by serial entrepreneurs Varun Badhwar and Dimitri Stiliadis, and is backed by leading VC firms such as Dell Technology Capital, Lightspeed, and Sierra Ventures.

Sound interesting? Let’s talk if you want to be part of the next big leap in security innovation!

How You'll Make an Impact

• You will play a pivotal role in architecting and building the core backend infrastructure for our SaaS products.
• You will lead and contribute to large-scale technical projects, ensuring the scalability, reliability, and performance of our systems.
• Design, architect, and build features end-to-end while working closely with Product Management, and our distributed Engineering team
• Play a significant role in driving innovation, making critical architectural decisions, and leading the implementation of cutting-edge technologies.
• We encourage and support active participation in external technical forums, conferences, and open-source communities, allowing you to contribute to the broader tech community and stay at the forefront of industry trends.
• Mentor and coach team members by sharing your expertise, and promoting best practices within the team to foster a culture of continuous learning and growth.
• Use best practices of observability to ensure that the product and the platform have the best reliability and availability for our customers.

What You Bring to the Table

• Bachelor's degree in engineering with 10+ years of experience building scalable backends for product/SaaS companies.
• At least 3-years experience in Golang programming with a focus on microservices/distributed architecture
• Practical experience in designing APIs with one or more frameworks (gRPC [preferred], ReST, GraphQL, Thrift, etc.).
• Ability to build and design technical solutions from scratch and your code and documentation can be used as an example for coding best practices at Endor.
• Scalable Distributed System Experience - understand micro-services and domain-driven design, load balancing, horizontal/vertical scaling, and stateless architectures.
• Architecture - knowledge of data structures and a keen eye for building architectures that scale and extend easily for longevity. Apply data-driven techniques to evaluate and propose architectural choices. 
• Ability to discuss tradeoffs between architecture’s choice to influence groups to move in the right direction.
• Able to enjoy working in a fast-moving environment with evolving requirements.
• Ability to solve problems creatively and independently when in uncharted or unfamiliar territory.
• Practical experience in troubleshooting distributed systems and ability to solve root causes.

Why Endor Labs

We’re building at the intersection of developer productivity and security — one of the fastest-growing spaces in software. Our dev-loved platform has real ROI, strong momentum, and customers who care about doing things right.

At Endor Labs, we think big, start small, and learn fast. We take ownership, move with purpose, and always start with the customer’s success. We debate with data, make the complex simple, and challenge each other with kindness and candor. We celebrate wins, learn from misses, and have fun along the way — because when our customers win, we all win.

Endor Labs is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Even if you don't fit every requirement above, we believe in the power of diverse perspectives and experiences, so we encourage all talented individuals to apply—there's no one-size-fits-all here.

Who we are

Our mission is to help developers and AppSec teams spend more time accelerating development and less time dealing with security issues. Watch our 3 min pitch from our Founder & CEO here: https://www.youtube.com/watch?v=B0wmZBcPkFE

Endor Labs has been recognized as a Gartner Cool Vendor, a RSA Innovation Sandbox finalist, and a Black Hat Innovation Spotlight finalist, all in its first year from launch.

The company was founded by Varun Badhwar and Dimitri Stiliadis, who have created multiple category-defining cloud security companies. We have raised $70M in Series A funding and assembled a team of the world’s leading static analysis experts and enterprise software veterans to increase developer productivity and open source software adoption.

What you’ll do

• The primary tasks of this position relate to the broad field of software vulnerability research, i.e. the discovery and evaluation of security vulnerabilities in first- and third-party software components. The focus clearly lies on application security, in contrast to network security, cryptography or other security fields.
• The tasks comprise, for example, the detection of 0-day vulnerabilities in open source projects, the development of exploit code and PoCs for known vulnerabilities, the evaluation and comparison of security tools, the detection of malicious open source components, or the development, configuration and use of SAST or DAST tools.
• One specifically important task includes the oversight (and possible extension) of Endor Labs’ vulnerability database and ingestion process, to ensure the timely production of accurate advisories by our third-party suppliers, and their ingestion by our cloud platform.
• All those tasks include the opportunity to present novel research at security conferences or other events, and – more generally – participate in dissemination and communication efforts, e.g. through the writing of blog posts or technical reports/whitepapers.

What we're looking for 

• Bachelor's degree in engineering with at least 5 years of experience in application security
• Programming experience (Go, Java, JS, Python)
• Understanding of software weaknesses and vulnerabilities
• Experience in configuring and operating security tooling (SCA, SAST, etc.)
• Understanding of industry standards in the field (CVE, EPSS, etc.)

Nice to have

• Experience in developing own security tools or SAST rules
• Understanding of software supply chains and their attack surface
• Publicly reported 0-day vulnerabilities
• Experience in malware detection and analysis
• Security certification like OffSec Certified Professional (OSCP) or Certified Ethical Hacker (CEH)

At Endor Labs, we:

• Strive for excellence in everything we do, prioritizing quality, speed, and impactful outcomes.
• Engage in first principles thinking to debate ideas, test assumptions, and make decisions.
• Put data above opinions, seeking truth and clarity in all our endeavors.
• Embrace a culture of feedback and continuous improvement, assuming good intent in all interactions.
• Celebrate wins as a team, understanding that our collective success is intertwined with the success of our customers.

About Us

Endor Labs is building the Application Security platform for the software development revolution. Modern software is complex and dependency-rich, making it increasingly difficult to pinpoint the risks that truly matter. Endor Labs solves this challenge by building a call graph of your entire software estate—enabling teams to clearly identify, prioritize, and fix critical risks faster. 

Trusted by companies that are one or one hundred years old, Endor Labs secures code whether it was written by humans or AI, and whether it's 40-year old C++ code or cutting edge Bazel Monorepos. Endor Labs was founded by serial entrepreneurs Varun Badhwar and Dimitri Stiliadis, and is backed by leading VC firms such as Dell Technology Capital, Lightspeed, and Sierra Ventures.

Sound interesting? Let’s talk if you want to be part of the next big leap in security innovation!

How You'll Make an Impact

• Design and build core backend features end-to-end for our SaaS products, working closely with Product Management and our distributed Engineering team.
• Contribute to large-scale technical projects, helping ensure the scalability, reliability, and performance of our systems.
• Participate in architectural discussions and help drive sound technical decisions that support the long-term health of our codebase.
• Write clean, well-documented, and testable code that serves as a reference for engineering best practices.
• Collaborate with cross-functional teams to translate product requirements into robust technical solutions.
• Actively participate in code reviews, providing constructive feedback and helping maintain high code quality across the team.
• Use best practices of observability to ensure that the product and platform deliver excellent reliability and availability for our customers.
• We encourage and support active participation in external technical forums, conferences, and open-source communities.

What You Bring to the Table

• Bachelor’s degree in Computer Science, Engineering, or a related field with 5+ years of experience building scalable backends for product/SaaS companies.
• At least 2 years of experience in Golang programming with a focus on microservices/distributed architecture.
• Practical experience in designing APIs with one or more frameworks (gRPC preferred).
• Strong understanding of scalable distributed systems — microservices, domain-driven design, load balancing, horizontal/vertical scaling, and stateless architectures.
• Ability to write clean, maintainable code and documentation that can serve as examples for engineering best practices.
• Comfortable working in a fast-moving environment with evolving requirements.
• Strong problem-solving skills with the ability to work creatively and independently when navigating unfamiliar territory.
• Practical experience in troubleshooting distributed systems and identifying root causes.
• Prior experience with Java or JVM-based technologies (e.g., Spring Boot, Gradle, Maven) is a strong plus. Familiarity with Java ecosystems can be valuable when working on our analysis pipelines and integrating with diverse customer environments.

Why Endor Labs

We’re building at the intersection of developer productivity and security — one of the fastest-growing spaces in software. Our dev-loved platform has real ROI, strong momentum, and customers who care about doing things right.

At Endor Labs, we think big, start small, and learn fast. We take ownership, move with purpose, and always start with the customer’s success. We debate with data, make the complex simple, and challenge each other with kindness and candor. We celebrate wins, learn from misses, and have fun along the way — because when our customers win, we all win.

Endor Labs is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Even if you don't fit every requirement above, we believe in the power of diverse perspectives and experiences, so we encourage all talented individuals to apply—there's no one-size-fits-all here.

Who We Are

Endor Labs is building the Application Security platform for the software development revolution. Modern software is complex and dependency-rich, making it increasingly difficult to pinpoint the risks that truly matter. Endor Labs solves this challenge by building a call graph of your entire software estate—enabling teams to clearly identify, prioritize, and fix critical risks faster. 

Trusted by companies that are one or one hundred years old, Endor Labs secures code whether it was written by humans or AI, and whether it's 40-year old C++ code or cutting edge Bazel Monorepos. Endor Labs was founded by serial entrepreneurs Varun Badhwar and Dimitri Stiliadis, and is backed by leading VC firms such as Dell Technology Capital, Lightspeed, and Sierra Ventures.

Sound interesting? Let’s talk if you want to be part of the next big leap in security innovation!

How You'll Make an Impact

• You will play a pivotal role in architecting and building the core backend infrastructure for our SaaS products.
• You will lead and contribute to large-scale technical projects, ensuring the scalability, reliability, and performance of our systems.
• Design, architect, and build features end-to-end while working closely with Product Management, and our distributed Engineering team
• Play a significant role in driving innovation, making critical architectural decisions, and leading the implementation of cutting-edge technologies.
• We encourage and support active participation in external technical forums, conferences, and open-source communities, allowing you to contribute to the broader tech community and stay at the forefront of industry trends.
• Mentor and coach team members by sharing your expertise, and promoting best practices within the team to foster a culture of continuous learning and growth.

What You Bring to the Table

If you are interested in helping to define and build a product and culture at an early-stage company, and the list below matches your background, we would love to talk to you!

• Bachelor's degree in engineering with at least 18+ years of experience building scalable backends for product/SaaS companies, with a strong track record of leading and delivering complex technical projects.
• Proficiency in Golang is strongly preferred; experience with other modern backend languages, microservices/distributed architecture, and frameworks is a plus.
• Practical experience in designing APIs with one or more frameworks (gRPC [preferred], ReST, GraphQL, Thrift, etc.).
• Excellent problem-solving and debugging skills, and effective communication and leadership abilities are a must.
• Scalable Distributed System Experience - understand micro-services and domain-driven design, load balancing, horizontal/vertical scaling, and stateless architectures.
• Architecture - knowledge of data structures and a keen eye for building architectures that scale and extend easily for longevity. Apply data-driven techniques to evaluate and propose architectural choices. 
• Ability to discuss tradeoffs between architecture’s choice to influence groups to move in the right direction.
• Able to enjoy working in a fast-moving environment with evolving requirements.
• Ability to solve problems creatively and independently when in uncharted or unfamiliar territory.
• Practical experience in troubleshooting distributed systems and ability to solve root causes.

Why Endor Labs

We’re building at the intersection of developer productivity and security — one of the fastest-growing spaces in software. Our dev-loved platform has real ROI, strong momentum, and customers who care about doing things right.

At Endor Labs, we think big, start small, and learn fast. We take ownership, move with purpose, and always start with the customer’s success. We debate with data, make the complex simple, and challenge each other with kindness and candor. We celebrate wins, learn from misses, and have fun along the way — because when our customers win, we all win.

Endor Labs is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Even if you don't fit every requirement above, we believe in the power of diverse perspectives and experiences, so we encourage all talented individuals to apply—there's no one-size-fits-all here.