or apply directly on Endor Labs's site. We never take the application ourselves.
Is this posting real?
- This role has been open
- 80 days Endor Labs's roles stay open a median of 80 days
- Reposted
- No
- Salary listed
- No 17% of Endor Labs's roles list one
- Ghost-job risk at Endor Labs
- high 28 stale, 0 reposted of 29 open
- Hiring momentum
- 38 roles opened in the last 90 days ↑ up vs. the prior 90 days
- Last confirmed on the employer's board
- 2026-10-22
Measured from postings appearing on and disappearing from Endor Labs's own greenhouse board since 2026-08-03. Full hiring picture for Endor Labs.
About this role
As a Senior Security Researcher at Endor Labs, you will focus on detecting, triaging, and analyzing malicious open source software components. Your daily tasks will involve assessing malware alerts, reverse-engineering suspicious packages, and producing detailed assessments while also contributing to external communications and collaborating with internal teams to enhance detection capabilities.
- benefits
- 1/5
- freshness
- 1/5
- career value
- 4/5
- role clarity
- 4/5
- pay transparency
- 0/5
Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Endor Labs as an employer.
What you need
- Bachelor's degree in engineering or a related field
- At least 3 years of hands-on professional experience in malware analysis, threat intelligence, or open source package security
- Experience triaging security alerts at scale and working within or alongside a SOC or threat intelligence team
- Hands-on experience reviewing and interpreting IoCs (file hashes, domains, IPs, behavioral signatures)
- Proficiency in reading and analyzing code across multiple languages (Python, JavaScript/TypeScript, Java, Go)
- Experience producing external security communications such as blog posts or technical reports
Nice to have
- Experience contributing to or operating threat intelligence platforms or malware databases
- Familiarity with static and dynamic analysis tooling (sandboxes, YARA rules, SAST tools)
- Understanding of software supply chain security standards and frameworks (SLSA, SSDF, etc.)
- Prior public research, CVE credits, or published malware findings
- Security certifications such as GREM (GIAC Reverse Engineering Malware) or equivalent
Worth weighing
- No salary listed
- The role involves significant technical analysis and communication, which may require strong writing skills for external publications.
- The focus on open source package security may limit exposure to other areas of cybersecurity.
- The company is in a rapidly evolving field, which could mean fast-paced changes in responsibilities and technologies.
Summarised from Endor Labs's posting. Read the full original.
Listed by Endor Labs on their greenhouse job board, last confirmed open on 2026-10-22. PitchMeAI is not the employer.
More roles at Endor Labs
- Solutions Architect - EastRemote US (EST)
- Don't See a Role that Fits? Apply Here.Palo Alto, CA
- Enterprise Account Executive - NY TristateNew York, NY
- Enterprise Account Executive - Bay AreaSF Bay Area
- Principal/ Sr Principal Backend EngineerBengaluru, India
- Enterprise Account Executive - SoutheastAtlanta, GA
- Enterprise Account Executive - LATAMMiami, FL
- Program Analysis EngineerPalo Alto, CA