Application Security Engineer I — Remote, Hands-On & Impactful

Trail of Bits; United States; Remote; USD 100,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid vacation

Parental leave

Relocation assistance to NYC

Working-from-Home stipend

Learning & Development stipend

All-team celebrations

Job summary

Trail of Bits is seeking a Security Engineer I to contribute to client software security assessments, collaborate with senior engineers, and own scoped portions of engagements. You will conduct vulnerability analysis, build tooling, and help clients understand and fix issues found.

The role blends vulnerability research with applied security, requiring hands-on code work, threat modeling, and delivering findings through client delivery.

Qualifications

• At least 1 year of combined relevant experience in application security or related areas.
• Demonstrable vulnerability-discovery capability and ability to discuss a found or validated vulnerability.
• Strong code-analysis skills and ability to read unfamiliar code.
• Hands-on coding proficiency in at least two languages (Rust, Go, C, C++, Python, JS/TS).
• Working knowledge of memory-corruption vulnerabilities and mitigations.
• Familiarity with OS concepts and how apps interact with system internals.
• Ability to investigate well-scoped problems independently and deliver with guidance.
• Clear written and verbal communication to engineers and on a distributed team.

Responsibilities

• Lead the review of a specific component, module, or system within a client engagement.
• Find and validate vulnerabilities in code and systems; explain exploitation paths and impact.
• Design and build security-testing tools for vulnerability detection and analysis.
• Review software architectures; identify attack surfaces and data flows; suggest mitigations.
• Translate findings into actionable recommendations for engineering teams.

Skills

Security analysis

Code reading

Rust/Go/C/C++

Vulnerability discovery

Python/JavaScript

Communication

Tools

Ghidra

DynamoRIO

Job description

Trail of Bits is seeking a Security Engineer I to contribute to client software security assessments, collaborate with senior engineers, and own scoped portions of engagements. You will conduct vulnerability analysis, build tooling, and help clients understand and fix issues found.

The role blends vulnerability research with applied security, requiring hands-on code work, threat modeling, and delivering findings through client delivery.