Application Security Engineer: Threat Modeling & Tools

Trail of Bits Inc.; New York (NY); Hybrid; USD 100,000 - 200,000; Full time

Benefits offered by this job

Fully company-paid insurance packages

401(k) plan with 5% match

20 days of paid vacation

Parental leave up to 4 months

Relocation assistance of $10,000

Job summary

Trail of Bits Inc. is seeking a Security Engineer to join their Software Assurance practice in New York, NY. This role involves conducting comprehensive security assessments of client software, focusing on low-level code analysis and developing security tools to enhance application security.

You'll work with industry-leading technology companies, analyze vulnerabilities, and collaborate with teams to advance security research. A competitive salary and various benefits are offered.

Qualifications

• Experience conducting low-level code security assessments.
• Hands-on experience performing manual code reviews to find vulnerabilities.
• Experience using static and dynamic analysis tools.

Responsibilities

• Conduct comprehensive low-level code security assessments.
• Design and implement custom security tools for automated vulnerability detection.
• Perform detailed architecture reviews and threat modeling of complex software systems.

Skills

Application security assessment experience

Manual code review depth

Static and dynamic analysis fluency

Binary analysis and reverse engineering

Memory corruption vulnerabilities and mitigations

System internals and security boundaries

Architecture review and threat modeling

Security tool development

Programming proficiency in multiple languages

Communicating findings to technical stakeholders

Job description

Trail of Bits Inc. is seeking a Security Engineer to join their Software Assurance practice in New York, NY. This role involves conducting comprehensive security assessments of client software, focusing on low-level code analysis and developing security tools to enhance application security.

You'll work with industry-leading technology companies, analyze vulnerabilities, and collaborate with teams to advance security research. A competitive salary and various benefits are offered.