Program Analysis Engineer

Join Endor Labs as a Member of Technical Staff (Program Analysis). In this individual contributor role, you will focus on static analysis and machine learning for code initiatives. You will contribute to existing static analysis tools, evolve our Software Composition Analysis (SCA) and Static Application Security Testing (SAST) platforms, and shape machine-learning experiments. You will collaborate closely with engineering, product, and research teams to translate customer needs into scalable production systems. This role is ideal for engineers who enjoy programming languages and code analysis, are curious about applying ML techniques to real-world code and AppSec problems, and thrive in a fast-paced startup environment.

• Contribuer à l'amélioration de la précision, du rappel, de la couverture et des performances des outils d'analyse statique existants.
• Participer aux expériences d'apprentissage automatique pour l'analyse de la composition logicielle (SCA) et les tests de sécurité des applications statiques (SAST), de la définition du problème à l'évaluation.
• Collaborer avec les équipes d'ingénierie, de produit et de recherche pour traduire les besoins des clients en systèmes de production évolutifs.
• Some exposure to program analysis or static analysis (e.g., call graphs, data-flow or taint analysis, abstract interpretation, symbolic execution) or to ML for code (e.g., vulnerability detection, code representation learning, program repair, code embeddings, reachability prediction, LLM-based code understanding). Deep expertise in one area is great; a working familiarity and eagerness to learn is also welcome
• Good communication and collaboration skills. You can work through technical trade-offs with teammates and explain your thinking clearly
• A software engineering background—industry experience, research, open source, or a mix
• Some relevant experience in software engineering or a related field. We're open to a range of backgrounds and career stages, from early-career engineers through experienced ICs
• Comfort working in at least one of Java, Python, or Go, and the ability to ship production-quality code (or the trajectory to get there quickly)
• A product mindset—you care about building things that work well for users, not just technically interesting code
• Interest in giving talks at technical conferences, workshops, or industry events, or in engaging directly with customers. Neither is required
• Familiarity with AppSec, DevSecOps, or software supply chain security
• Experience with ML systems in production (training pipelines, evaluation frameworks, model serving, feedback loops)
• Contributions to open-source static analysis tools, program analysis frameworks, or security research
• Experience at an early-stage startup or as a founding engineer
• Experience building developer-facing products or platforms
• Endor Labs is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Even if you don't fit every requirement above, we believe in the power of diverse perspectives and experiences, so we encourage all talented individuals to apply—there's no one-size-fits-all here