Senior Corporate Security Engineer

Endor Labs is building the premium Application Security platform for the software development revolution. Modern software is complex and dependency-rich, making it increasingly difficult to pinpoint the risks that truly matter. Endor Labs solves this challenge by building a call graph of your entire software estate—enabling teams to clearly identify, prioritize, and fix critical risks faster. 

Trusted by companies that are one or one hundred years old, Endor Labs secures code whether it was written by humans or AI, and whether it's 40-year old C++ code or cutting edge Bazel Monorepos. Endor Labs was founded by serial entrepreneurs Varun Badhwar and Dimitri Stiliadis, and is backed by leading VC firms such as Dell Technology Capital, Lightspeed, and Sierra Ventures.

Sound interesting? Let’s talk if you want to be part of the next big leap in security innovation!

• Own the security posture of our Mac fleet: CrowdStrike EDR deployment, tuning, and detection coverage; endpoint hardening baselines; and compliance monitoring. 
• You'll partner with IT (who owns device management and MDM) to make sure our security requirements are reflected in how devices are provisioned and maintained, but the security bar and its enforcement are yours.

• Own identity and access as our security foundation. 
• Harden and administer our Google Workspace identity layer and SSO, drive strong authentication (MFA/phishing-resistant factors), design and enforce least-privilege access across our SaaS estate, and build sane joiner/mover/leaver access controls in partnership with IT and People.

• Establish and maintain security posture across our SaaS applications - configuration hardening, third-party app and OAuth governance, data-sharing controls, and continuous monitoring for drift. You'll decide what "good" looks like for our critical SaaS and hold the line on it.

• Own the security of our email environment. Harden Gmail / Google Workspace against phishing and account compromise.

• 5+ years in security engineering, with meaningful depth in corporate / enterprise security (identity, endpoint, SaaS, and detection & response).
• Experience:
• Administering Google Workspace (or a comparable IdP such as Okta/Entra) and driving SSO, MFA, and least-privilege access at scale.
• Managing security of a macOS fleet and tuning EDR tooling.
• Ensuring corporate telemetry (identity, endpoint, SaaS) is well-instrumented and flowing into a SIEM/logging platform, plus hands-on comfort writing detections and participating in incident response.
• Using AI thoughtfully and responsibly to accelerate your work and provide a better “security experience” for stakeholders. 

• Go to extraordinary lengths to distinguish ourselves through world-class work.
• Prioritize quality over speed, and speed over scope.
• Desire to work with deeply kind, mission-driven people.
• Strive to make the complex simple.
• Use first principles to debate ideas, test assumptions, and make decisions.
• Seek the truth by putting data above opinions.
• Assume good intent and give tactical feedback to help each other get better.
• Hold no ego—when our customers win, we all win.