Senior Security Engineer, Trail of Bits
Research & Engineering
$170-220k
+ Performance-based bonuses
More information about location
Security engineering firm
Open for applications
Security engineering firm
21-100 employees
Open for applications
$170-220k
+ Performance-based bonuses
More information about location
21-100 employees
Company mission
To help secure the world's most targeted organizations and products.
Role
Who you are
- Development Expertise: Strong software development skills with experience in Rust, C++, and/or Python, with occasional need for Go or Java knowledge and demonstrated ability to quickly learn new programming languages, frameworks, and technologies
- Experience with multiple programming languages and paradigms is highly valued
- Security Knowledge: Understanding of computer security principles, common vulnerability classes, and experience with secure development practices and building secure software
- Prior contributions to open-source security tools or frameworks and participation in CTF competitions or security challenges would be beneficial
- Technical Capabilities: Root-cause analysis and debugging skills for low-level technical issues, ability to interpret requirements, decompose tasks, and make engineering estimates
- Understanding of low-level systems (including memory management and OS internals), compiler technology, program analysis, or binary analysis is advantageous
- Advanced Domain Knowledge: Experience with AI/ML systems and associated security challenges is valuable, as is experience developing commercial-grade software used by the public
- Experience reading, writing, and implementing academic papers demonstrates the depth of knowledge we value
- Collaboration Skills: Ability to work independently and as part of a remote team with strong written and verbal communication skills for frequent team member and client interactions
- Experience in public speaking is a plus
- CI/CD Experience: Familiarity with CI/CD pipelines and automated testing methodologies for secure software development
What the job involves
- Trail of Bits seeks a Software Security Engineer within our Research & Engineering team to work at the intersection of security research and practical software development
- You will design, build, and enhance security tools and frameworks across various contexts, working on projects ranging from compiler-based security tools to AI/ML security frameworks
- On any given day, you might implement security-focused software tools, contribute to open-source projects, analyze complex security challenges, or develop practical solutions for clients
- Working in small teams of 2-4 people, you'll collaborate with researchers, security experts, and clients while building impactful tools
- You will have opportunities to pursue your interests while delivering practical security solutions, with software development primarily involving Rust, C++, and Python, with occasional work in Go and Java
- Success is measured through impact, focusing on building tools others can use and build upon, rather than paper metrics
- Tool Development: Design and implement security-focused software tools and frameworks, contributing to open-source security projects and developing internal tools for practical security solutions
- Security Analysis: Analyze complex security challenges across the stack, from low-level systems to application frameworks, evaluating and improving existing software through code review and enhancement
- Implementation: Develop secure CI/CD pipelines with GitHub Actions integration, contributing to AI/ML security research and tooling with a focus on practical, deployable solutions
- Client Collaboration: Work directly with industry-leading teams to understand complex security challenges and implement effective solutions through deep technical analysis and recommendations
- Technical Communication: Effectively communicate technical concepts to team members, clients, and the broader security community, with opportunities to write about your work publicly
Our take
As more and more commercial activities go online, companies are increasingly exposed to cybersecurity threats. This requires organizations to get serious about their digital security infrastructure. As a result, the business of cybersecurity auditing has boomed.
Trail of bits is one such auditing firm with a signature method: combining its top-quality research in the cybersecurity field with the approaches of a real-world hacker. Distinguishing itself even further, the company has engaged in a new strategy fit for a new market - blockchain. The cybersecurity firm is now one of the world’s most prominent blockchain code auditors.
It's an exploding niche for which Trail of Bits has also been able to create an entirely new business line. While also auditing on behalf of blockchain software businesses, it is also expanding a service of engaging the government & large financial institutions for work on evaluating the risks of blockchain software.
Trail of Bits is well positioned as a result. Even if, as some commentators predict, the bottom falls out of the blockchain industry, the firm has used the momentum to reinforce its position as a thought leader on cutting-edge technology, establishing important partnerships that will last regardless.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
18% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Aug 2023
$4m
SEED
Jan 2018
$0.2m
GRANT
Total funding: $5.4m
Company benefits
- Health Insurance with no-monthly-premiums
- Vision, Dental, Life & Disability Insurance
- Access to Kindbody for gynecology and fertility care
- Access to HealthAdvocate, Teledoc & OneMedical
- 401k with 5% company matching
- Competitive salaries
- Ongoing bonus opportunities
- ConnectYourCare Flex Spending Account (FSA)
- Commuter Benefits
- Fitness stipends
- Four weeks of PTO
- Fifteen company holidays
- 4 months paid parental leave
- End-of-year performance bonus
- Continuing education, public presentations and blog posts
- Recruiting & referrals
- Conferences & off-sites
- Company & team outings
- Virtual events
- Continuing education
- Training sessions & learning courses
- Internal research & development Projects
- Charitable donation matching
- Relocation assistance
- 1Password subscription
- Work from home stipend
- Remote work friendly
Company HQ
Gowanus, NY
Leadership
Dan Guido
(Co-Founder & CEO)Previously a Senior Security Consultant at iSEC Partners. Also worked as Threat Intelligence Lead for the U.S. Federal Reserve System. Former NSA Analyst.
Share this job
View 2 more jobs at Trail of Bits