Application Security Engineer — Remote & Tooling-Focused

Trail of Bits; United States; On-site; USD 100,000 - 200,000; Full time

Benefits offered by this job

Competitive salary with performance-based bonuses

Fully company-paid insurance packages

401(k) plan with a 5% match

20 days of paid vacation

Parental leave of 4 months

$1,000 work-from-home stipend

$750 annual learning & development stipend

Philanthropic contribution matching up to $2,000 annually

Job summary

Trail of Bits seeks a Security Engineer, Application Security to conduct security assessments and low-level code analysis. The position impacts secure technology for top-tier clients, contributing both directly and through collaborative research efforts.

You'll engage with advanced security challenges, developing tools and methodologies while enjoying a supportive remote-first workplace culture. Offering a salary range of $100,000 to $200,000, this role promises both rewards and responsibilities in the evolving tech landscape.

Qualifications

• Direct experience conducting low-level code security assessments of complex software.
• Hands-on experience performing manual code reviews to find vulnerabilities that automated tools miss.
• Experience using static and dynamic analysis tools as part of a deeper review process.
• Experience performing binary analysis and reverse engineering of compiled software.
• Demonstrated experience identifying memory corruption vulnerabilities and reasoning about modern mitigations.
• Deep experience reasoning about system internals, IPC, access control implementations, and platform security boundaries.
• Experience performing architecture reviews and threat modeling of software systems and cloud environments.
• Experience designing and building custom security tools for automated vulnerability detection.
• Hands-on experience programming in two or more of Rust, Golang, Kotlin, Swift, Objective-C, JavaScript, TypeScript, Python, Ruby, C, or C++.
• Experience translating complex security findings into clear, actionable recommendations for teams.

Responsibilities

• Conduct comprehensive low-level code security assessments across applications.
• Design and implement custom security tools for automated vulnerability detection.
• Perform detailed architecture reviews and threat modeling of complex software systems.
• Work directly with industry-leading teams to review their application infrastructure.
• Contribute to the advancement of application security and develop new methodologies.

Skills

Application security assessment experience

Manual code review depth

Static and dynamic analysis fluency

Binary analysis and reverse engineering

Memory corruption vulnerabilities and mitigations

System internals and security boundaries

Architecture review and threat modeling

Security tool development

Programming proficiency across multiple languages

Communicating findings to technical stakeholders

Job description

Trail of Bits seeks a Security Engineer, Application Security to conduct security assessments and low-level code analysis. The position impacts secure technology for top-tier clients, contributing both directly and through collaborative research efforts.

You'll engage with advanced security challenges, developing tools and methodologies while enjoying a supportive remote-first workplace culture. Offering a salary range of $100,000 to $200,000, this role promises both rewards and responsibilities in the evolving tech landscape.