Principal Security Engineer - AI-Driven App Security

Trail of Bits; United States; On-site; USD 200,000 - 235,000; Full time

Benefits offered by this job

Competitive salary with performance-based bonuses

Fully company-paid insurance, including health and dental

401(k) plan with a 5% match

20 days paid vacation

Parental leave

Relocation assistance up to $10,000

Working-from-home stipend of $1,000

Annual $750 Learning & Development stipend

Philanthropic contribution matching up to $2,000 annually

Job summary

A cybersecurity innovation firm is seeking a Principal Security Engineer for application security to lead high-impact client engagements. Responsibilities include conducting security assessments, mentoring engineers, and driving security initiatives. Ideal candidates will have over 8 years of expertise across various security domains and a background in leveraging AI for security workflows. The role offers competitive remuneration and comprehensive benefits.

Qualifications

• 8+ years of experience in application security across various domains.
• Experience leveraging AI for security workflows.
• Proven track record of leading complex security engagements and mentoring engineers.
• Experience conducting comprehensive security assessments.
• Strong foundation in system internals and memory corruption vulnerabilities.
• Proficient in manual code review across multiple languages.
• Hands-on experience with SAST/DAST tools and customization.

Responsibilities

• Lead comprehensive security assessments across diverse technology stacks.
• Conduct threat‑modeling exercises and architecture reviews.
• Perform expert-level manual code reviews.
• Design and build advanced security tools and frameworks.
• Serve as a trusted security advisor to client leadership.
• Mentor team members and develop assessment methodologies.
• Represent the company at conferences and in publications.

Skills

Deep Application Security Expertise

AI Security Assessment

Leadership Experience

Advanced Assessment Capabilities

Low-Level Security Proficiency

Multi-Language Code Review Mastery

SAST/DAST Expertise

Threat Modeling Excellence

Consulting Excellence

Tools

Static and Dynamic Analysis Tools

Job description

A cybersecurity innovation firm is seeking a Principal Security Engineer for application security to lead high-impact client engagements. Responsibilities include conducting security assessments, mentoring engineers, and driving security initiatives. Ideal candidates will have over 8 years of expertise across various security domains and a background in leveraging AI for security workflows. The role offers competitive remuneration and comprehensive benefits.