Senior Security Researcher

About this role

Not quite right? These jobs in Bengaluru match the same skills — apply to a few to improve your chances.

Software Engineer - Backend,Java/Go, Distributed Systems, Cloud- 4+ Years

Cisco

In OfficeBengaluru

Apply

Platform Engineer III (EKS and Python/Go)

Guidewire

In OfficeBengaluru

Apply

Sr. Staff Software Development Engineer - Java/Go + Distributed Systems

Zscaler

In OfficeBengaluru

Apply

Senior Software Engineer – Full Stack (Ruby on Rails, Go, Java, React) from 4+ years

Cisco

In OfficeBengaluru

Apply

Skills you'll use

What you'll do

• The primary tasks of this position relate to the detection, triage, and analysis of malicious open source software components — identifying threats across public package ecosystems (npm, PyPI, Maven, etc.) and assessing their scope, intent, and impact.
• Day-to-day work includes triaging and assessing incoming malware alerts, reviewing Indicators of Compromise (IoCs), and maintaining threat campaign records to track attacker infrastructure, tactics, and patterns over time.
• A core responsibility is the in-depth technical analysis of suspicious packages: reverse-engineering obfuscated code, identifying malicious behaviors (exfiltration, backdoors, dependency confusion, typosquatting, etc.), and producing detailed internal assessments.
• You will author and publish external-facing content — blog posts, technical write-ups, and security advisories — communicating findings clearly to both technical and non-technical audiences, and contributing to the broader security community's awareness of emerging threats.
• You will collaborate with internal teams to feed findings into detection pipelines, enrich our vulnerability and threat database, and help improve automated detection coverage over time.
• What we're looking for
• Bachelor's degree in engineering or a related field, with at least 3 years of hands-on professional experience specifically in malware analysis, threat intelligence, or open source package security
• Demonstrated experience triaging security alerts at scale and working within or alongside a SOC or threat intelligence team
• Hands-on experience reviewing and interpreting IoCs (file hashes, domains, IPs, behavioral signatures) and maintaining threat campaign tracking
• Proficiency in reading and analyzing code across multiple languages (Python, JavaScript/TypeScript, Java, Go) — including obfuscated or minified code

Who can apply

• Proficiency in reading and analyzing code across multiple languages (Python, JavaScript/TypeScript, Java, Go) — including obfuscated or minified code
• Experience producing external security communications: blog posts, advisories, or technical reports intended for a public or customer-facing audience
• Understanding of package manager ecosystems and common attack patterns (typosquatting, dependency confusion, malicious install scripts, etc.)
• Experience contributing to or operating threat intelligence platforms or malware databases
• Familiarity with static and dynamic analysis tooling (sandboxes, YARA rules, SAST tools)
• Understanding of software supply chain security standards and frameworks (SLSA, SSDF, etc.)
• Prior public research, CVE credits, or published malware findings
• Security certifications such as GREM (GIAC Reverse Engineering Malware) or equivalent

About Endor Labs

Searching for “Endor Labs jobs” or “jobs at Endor Labs”? You’re in the right place.