Security Engineer - Vulnerability

<h2><strong>Who we are</strong></h2> <p>Our mission is to help developers and AppSec teams spend more time accelerating development and less time dealing with security issues. Watch our 3 min pitch from our Founder &amp; CEO here:&nbsp;<a href="https://www.youtube.com/watch?v=B0wmZBcPkFE">https://www.youtube.com/watch?v=B0wmZBcPkFE</a></p> <p>Endor Labs has been recognized as a Gartner Cool Vendor, a RSA Innovation Sandbox finalist, and a Black Hat Innovation Spotlight finalist, all in its first year from launch.</p> <p>The company was founded by&nbsp;<a href="https://www.linkedin.com/in/vbadhwar/">Varun Badhwar</a>&nbsp;and&nbsp;<a href="https://www.linkedin.com/in/stiliadis/">Dimitri Stiliadis</a>, who have created multiple category-defining cloud security companies. We have raised $70M in Series A funding and assembled a team of the world’s leading static analysis experts and enterprise software veterans to increase developer productivity and open source software adoption.</p> <h2><strong>What you’ll do</strong></h2> <ul> <li>The primary focus of this position is to help the team further advance Endor Labs'proprietary vulnerability database — extending and improving our existing AI pipelines,<br>e.g., in the areas of automated vulnerability validation, reachability analysis, and exploit&nbsp;generation.</li> <li>Day-to-day work includes monitoring and managing pipelines that triage, enrich, and&nbsp;prioritize vulnerabilities at scale, working with the standards and data sources the<br>ecosystem is built on (CVE, CWE, CVSS, EPSS, PURL, NVD, OSV, GHSA, VEX) and&nbsp;continuously improving the accuracy, coverage, and timeliness of our data.</li> <li>You will work hand-in-hand with our world-class 0-day researchers to scale automated&nbsp;vulnerability discovery — turning manual research workflows into repeatable,<br>production-grade systems.</li> <li>You will investigate high-impact vulnerabilities and the vulnerability landscape at large,&nbsp;and author external-facing content — blog posts, technical write-ups, and advisories —<br>communicating findings clearly to both technical and non-technical audiences.</li> <li>You will collaborate with internal teams to feed findings into detection and analysis&nbsp;pipelines, enrich our vulnerability database, and help improve automated coverage over<br>time</li> </ul> <h2><strong>What </strong><strong>we're looking for&nbsp;</strong></h2> <ul> <li>Bachelor's degree in engineering or a related field, with at least 3 years of hands-on&nbsp;professional experience in vulnerability research, vulnerability management, product<br>security, or ap