Security Engineer - Vulnerability Management

Overview

Security Engineer focused on vulnerability management and advancing Endor Labs’ proprietary vulnerability database and AI pipelines.

What you'll do

• Advance proprietary vulnerability database by extending and improving AI pipelines.
• Monitor and manage pipelines that triage, enrich, and prioritize vulnerabilities at scale.
• Improve accuracy, coverage, and timeliness of vulnerability data.
• Scale automated vulnerability discovery with 0-day researchers.
• Investigate high-impact vulnerabilities and the broader vulnerability landscape.
• Author external-facing security content such as blogs, technical write-ups, and advisories.
• Collaborate with internal teams to feed findings into detection and analysis pipelines.

What you'll need

• Bachelor’s degree in engineering or a related field.
• At least 3 years of hands-on professional experience in vulnerability research/management or application security.
• Extensive knowledge of software vulnerabilities and triage/prioritization using standards including CVE, CWE, CVSS, EPSS, PURL, NVD, OSV, GHSA, and VEX.
• Hands-on experience building production-grade solutions at enterprise scale (e.g., CI/CD automation or managing SAST/SCA findings).
• Demonstrated experience shipping AI/agentic systems to production with measured output quality.
• Proficiency reading and analyzing code across Python, JavaScript/TypeScript, Java, and Go, including reasoning about patches and exploitability.
• Experience producing external security communications such as blog posts, advisories, or technical reports.

Details

• Location: Bengaluru, India.