Senior Product Security Engineer

About the role

Endor Labs is building an Application Security platform to help teams identify and fix critical risks in complex software estates. As a Senior Product Security Engineer in Bengaluru, you will own application security end-to-end, securing the product from code to runtime while hardening AI agents and managing responsible disclosure. This on-site role involves partnering with engineering teams to define secure architectures and shape the security program.

What you’ll do

• Own application security end-to-end, including code to artifact to runtime
• Harden AI agents by enforcing least-privilege access and maintaining visibility
• Own software supply chain security and first-party software security
• Run the responsible disclosure program and triage external reports
• Conduct security design reviews and define secure architectures with engineering
• Partner with Head of Security & IT, engineering, and product teams
• Help shape and evolve the application security program as an early member
• Serve as customer zero for the security platform and influence the roadmap

What you’ll bring

• 5+ years of experience in application security or product security
• Strong hands-on experience across application security fundamentals
• At least 2 years of experience with agentic software development security
• Strong experience with threat modeling and secure architecture design

Nice to have

• Practical experience securing build systems and CI/CD pipelines at scale
• Experience with Bazel monorepos is a strong plus
• Hands-on experience running penetration tests end-to-end
• Ability to investigate, understand, and remediate security issues

Skills