Senior Security Researcher, Truffle Security
$156-184k
Software for identifying and remediating leaked sensitive information
Be an early applicant
Software for identifying and remediating leaked sensitive information
21-100 employees
Be an early applicant
$156-184k
21-100 employees
Company mission
To make security issues more identifiable, accessible, and easier to fix.
Role
Who you are
- Proven background in security research - Ideally, you have written/presented about security vulnerabilities in the past and can share some of these with us
- Expertise in application security, plus experience in at least one other category:
- Cloud Security
- DevSecOps
- Data Analytics
- Blue Team
- ....Something else? Surprise us!
- Excellent technical writing skills that demonstrate clarity, depth, and accuracy
- History of public speaking on security topics, with the ability to engage and educate technical and non-technical audiences
- Intermediate programming skills - your code doesn’t need to be production-ready, but you should be highly comfortable prototyping and building proof-of-concept tools
- We work primarily in Python and Golang
- Familiarity with LLM tools and how to effectively incorporate them into research and programming workflows
- Strong collaboration abilities - You’re equally good at respectfully asking for help and humbly providing it
- Ability to juggle multiple long-term research projects - We often run 5 or 6 projects simultaneously without compromising quality or timelines
- High ethical standards and integrity - We find many security vulnerabilities in our research, and it takes maturity to handle interactions with the organizations we disclose to
- Attention to Detail - There are many moving parts during research projects, and this role requires patience and extreme attention to detail
What the job involves
- In this highly visible, community-focused position, you will spearhead open-source security research projects and share your findings with the broader security community via blog posts, videos, webinars, conference talks, and open-source code contributions
- By highlighting real-world security vulnerabilities, you’ll help amplify the Truffle Security brand and inspire organizations to better secure themselves
- Working closely with our Security Research team lead, you'll have the opportunity to select and run research projects that align with industry trends, emerging threats, product features, and company goals
- Your expertise in application security AND one other information security domain will drive the creation of engaging, credible content that resonates with both technical and non-technical audiences
- Conduct cutting-edge open-source security research in areas broadly related to secrets (application security, cloud security, DevSecOps, etc.)
- Create engaging content to showcase research findings, including blog posts, technical documentation, videos, and whitepapers
- Present at conferences and industry events to share your discoveries, represent Truffle Security, and build community interest/trust
- Build Proof-of-Concept tools to assist with research and then share them internally with engineering
- Contribute to Truffle Security’s Open-Source Tools when research drives new improvements to TruffleHog or requires a new tool altogether
- Serve as a security subject matter expert for engineering by helping track down the occasional security bug, providing insight on a new product/feature, and knowledge sharing
- Maintain a positive, respectful, and ethical attitude in all external and internal interactions. There's no room for egos or “gotchas” when dealing with security research
Our take
Data breaches can be detrimental to companies, particularly when they regard the leaking of sensitive data such as private keys and login credentials. However, such breaches are common and can be difficult to identify due to the vast range of platforms and SaaS that modern businesses use, often resulting in leaks only being identified when it's too late to prevent.
Truffle Security provides a software tool named TruffleHog that identifies and remediates sensitive information that has leaked within a business's digital infrastructure, running scans automatically to catch vulnerable data before it leaks. The software integrates within major SaaS platforms such as Slack, AWS, Gmail, and Github, also offering bespoke integration services for unique business infrastructures.
Whilst many cybersecurity platforms can identify the source of data leaks early to minimize their impact, Truffle Security has recognized that this is often too little too late. By constantly scanning business environments behind the scenes, the company shows great potential to disrupt the data protection market by completely preventing data leaks and thus removing the need for recovery specialists.
Steph
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
Company
Funding (1 round)
Dec 2021
$15m
SERIES A
Total funding: $15m
Company benefits
- 401(k) with 6% company match
- Flexible paid time off: 14 paid holidays, including Thanksgiving and Winter break, and "Truffle Holidays" where the entire company takes a day off
- Medical, dental, and vision coverage: 80% Premium coverage for employees & their dependents
- Remote work stipend: $800 new hire stipend, and $100monthly thereafter. We want you to be comfortable working remotely
- Health & wellness stipend: $1,200/year. Maintaining your physical mental, and emotional well-being is foundational to doing your best work
- Learning & development stipend: $2,000/year. Adopting a growth-mindset allows you to grow professionaly and personally
- Company off-sites: We’re 100% remote with no office, but won’t let that stop us from working closely together. Past destinations have included Hawaii, Cabo, Chicago, Savannah, and the Rocky Mountains
Company HQ
Financial District, San Francisco, CA
Leadership
Dylan Ayrey
(Co-Founder & CEO)Graduated from Rochester Institute of Technology with a BS in Computer Engineering. Experienced Senior Security Partner having worked at Netflix.
Dustin Decker
(Co-Founder & CTO)Before co-founding Truffle Security, they were a Senior Security Engineer at Cruise and an Application Security Engineer at Indeed.
Share this job
View 5 more jobs at Truffle Security