Remote: Hands-On Application Security Engineer I

Trail of Bits; United States; Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health Insurance

Vision, Dental, Life & Disability

401k with company matching

Relocation assistance

Work from home stipend

Conferences & off-sites

Job summary

Trail of Bits seeks a Security Engineer I for our Application Security practice. You will contribute to security assessments of client software, partner with more experienced engineers, and own clearly scoped pieces of client engagements.

Your hands-on work includes analyzing complex code, building custom tooling, conducting threat modeling, and delivering findings to clients. This role bridges vulnerability research and applied security and is aimed at early-career professionals with hands-on

Qualifications

• 1+ year of combined experience in application security, vulnerability research, or security-focused software engineering.
• Ability to reason about memory‑corruption vulnerabilities and mitigations (e.g., buffer overflows, ASLR, NX/DEP).
• Ability to investigate well-scoped problems, debug issues, document evidence, and deliver with review from a project lead.
• Familiarity with OS concepts, IPC, privilege boundaries, and how apps interact with system internals.
• Strong code-analysis skills: read unfamiliar code, trace execution and data flow, identify flaws.
• Demonstrated vulnerability-discovery capability via professional work, coursework, open source, or CTFs.

Responsibilities

• Lead the review of a specific component or system within a client engagement.
• Find and validate vulnerabilities in application code and systems, explain exploitation paths.
• Develop proof-of-concept code when appropriate.
• Design and build security-testing tools and automation.
• Review architectures, attack surfaces, data flows and mitigations.
• Translate technical findings into actionable remediation guidance for engineers.

Skills

Vulnerability analysis

Code reading

Rust

Go

Python

Security tooling

CTF participation

Tools

Open-source tooling

Job description

Trail of Bits seeks a Security Engineer I for our Application Security practice. You will contribute to security assessments of client software, partner with more experienced engineers, and own clearly scoped pieces of client engagements.

Your hands-on work includes analyzing complex code, building custom tooling, conducting threat modeling, and delivering findings to clients. This role bridges vulnerability research and applied security and is aimed at early-career professionals with hands-on