Senior Security Researcher

About the role

Endor Labs is looking for a Senior Security Researcher to lead the detection, triage, and analysis of malicious open‑source software components across public package ecosystems. You will help protect developers and AppSec teams by uncovering threats, assessing their impact, and feeding findings into the company’s detection pipelines.

Key responsibilities

• Triaging and assessing incoming malware alerts, reviewing Indicators of Compromise and maintaining threat‑campaign records.
• Performing in‑depth technical analysis of suspicious packages, including reverse‑engineering obfuscated code and identifying malicious behaviors such as exfiltration, backdoors, dependency confusion, and typosquatting.
• Authoring and publishing external‑facing content – blog posts, technical write‑ups, and security advisories – to communicate findings to both technical and non‑technical audiences.
• Collaborating with internal teams to integrate findings into detection pipelines, enrich the vulnerability and threat database, and improve automated detection coverage.

Required profile

• Bachelor's degree in engineering or a related field with at least 3 years of hands‑on experience in malware analysis, threat intelligence, or open‑source package security.
• Demonstrated experience triaging security alerts at scale and working alongside a SOC or threat‑intelligence team.
• Proficiency reading and analyzing code in Python, JavaScript/TypeScript, Java, and Go, including obfuscated or minified code.
• Experience producing public security communications such as blog posts, advisories, or technical reports.
• Strong understanding of package‑manager ecosystems and common supply‑chain attack patterns (typosquatting, dependency confusion, malicious install scripts).

Required skills

• Python
• JavaScript
• TypeScript
• Java
• Go
• Reverse engineering
• Malware analysis
• Threat intelligence
• IoC analysis