Endor Labs

Senior Security Researcher

Endor Labs · Bengaluru, India

Posted about 3 months ago

or apply directly on Endor Labs's site. We never take the application ourselves.

Is this posting real?

This role has been open
80 days
Endor Labs's roles stay open a median of 80 days
Reposted
No
Salary listed
No
17% of Endor Labs's roles list one
Ghost-job risk at Endor Labs
high
28 stale, 0 reposted of 29 open
Hiring momentum
38 roles opened in the last 90 days
↑ up vs. the prior 90 days
Last confirmed on the employer's board
2026-10-22

Measured from postings appearing on and disappearing from Endor Labs's own greenhouse board since 2026-08-03. Full hiring picture for Endor Labs.

About this role

As a Senior Security Researcher at Endor Labs, you will focus on detecting, triaging, and analyzing malicious open source software components. Your daily tasks will involve assessing malware alerts, reverse-engineering suspicious packages, and producing detailed assessments while also contributing to external communications and collaborating with internal teams to enhance detection capabilities.

Our read on this posting2.0out of 5
benefits
1/5
freshness
1/5
career value
4/5
role clarity
4/5
pay transparency
0/5

Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Endor Labs as an employer.

What you need

  • Bachelor's degree in engineering or a related field
  • At least 3 years of hands-on professional experience in malware analysis, threat intelligence, or open source package security
  • Experience triaging security alerts at scale and working within or alongside a SOC or threat intelligence team
  • Hands-on experience reviewing and interpreting IoCs (file hashes, domains, IPs, behavioral signatures)
  • Proficiency in reading and analyzing code across multiple languages (Python, JavaScript/TypeScript, Java, Go)
  • Experience producing external security communications such as blog posts or technical reports

Nice to have

  • Experience contributing to or operating threat intelligence platforms or malware databases
  • Familiarity with static and dynamic analysis tooling (sandboxes, YARA rules, SAST tools)
  • Understanding of software supply chain security standards and frameworks (SLSA, SSDF, etc.)
  • Prior public research, CVE credits, or published malware findings
  • Security certifications such as GREM (GIAC Reverse Engineering Malware) or equivalent

Worth weighing

  • No salary listed
  • The role involves significant technical analysis and communication, which may require strong writing skills for external publications.
  • The focus on open source package security may limit exposure to other areas of cybersecurity.
  • The company is in a rapidly evolving field, which could mean fast-paced changes in responsibilities and technologies.

Summarised from Endor Labs's posting. Read the full original.

Listed by Endor Labs on their greenhouse job board, last confirmed open on 2026-10-22. PitchMeAI is not the employer.

More roles at Endor Labs

All 29 open roles at Endor Labs →