Security Engineer - Vulnerability
Endor Labs · Bengaluru, India
About the role
Security Engineer focused on advancing the vulnerability database, automating vulnerability validation, reachability analysis, and exploit generation. Involves working with security standards like CVE, CVSS, and OSV.
What you'll do
- Monitor and manage pipelines for vulnerability triage and enrichment
- Improve accuracy and coverage of vulnerability data
- Collaborate with 0-day researchers to scale automated discovery
- Investigate high-impact vulnerabilities
- Author blog posts, technical write-ups, and advisories
- Feed findings into detection and analysis pipelines
What they're looking for
- Bachelor's degree in engineering or related field
- 3+ years experience in vulnerability research or management
- Knowledge of CVE, CWE, CVSS, EPSS, PURL, NVD, OSV, VEX, SBOM
- Hands-on experience with vulnerability triage and prioritization
- Understanding of software supply chain security
Key details
- Company
- Endor Labs
- Location
- Bengaluru, India
- Work mode
- On-site
- Seniority
- Mid-level
- Role category
- Engineering
- Experience
- 3+ years
- Posted
- 19 Oct 2026
- Source
- job-boards.greenhouse.io