Security Engineer I — Vulnerability Research & Tools, Remote

Trail of Bits; United States; On-site; USD 100,000 - 160,000; Full time

Benefits offered by this job

Performance bonuses

Fully company-paid insurance packages:

401(k) plan

Vacation time

Parental leave

Relocation assistance

WFH stipend

Learning & development stipend

Team celebrations

Philanthropic matching

Job summary

Trail of Bits seeks a Security Engineer 1 for our Software Assurance practice. You will contribute to security assessments of client software, partnering with senior engineers, identifying vulnerabilities across the application and system level. You will own pieces of client engagements and develop tools alongside the team.

Your work will be hands-on and autonomous: analyzing complex code, building custom tooling, conducting threat modeling, and owning your findings through to client delivery.

Qualifications

• CTF wins, published CVEs, bug bounty finds, or security research demonstrating vulnerability discovery.
• Ability to read complex code, trace execution, and identify exploitable logic.
• Hands-on coding in multiple languages and strong memory-safety understanding.
• Experience with threat modeling, architecture reviews, and security fundamentals.

Responsibilities

• Lead security assessments for components or systems within client engagements.
• Find and validate real vulnerabilities, explain paths, assess impact, and provide POC when needed.
• Design and build security testing tools; own tooling from concept to deployment.
• Conduct threat modeling and architecture reviews highlighting attack surfaces and mitigations.
• Translate findings into actionable recommendations and manage client communications.
• Contribute to security research initiatives and document findings.

Skills

Vulnerability research

Code analysis

Coding proficiency

Memory safety

Systems knowledge

Autonomous problem-solving

Technical communication

Tools

Rust

Go

C

C++

Python

JavaScript

TypeScript

Job description

Trail of Bits seeks a Security Engineer 1 for our Software Assurance practice. You will contribute to security assessments of client software, partnering with senior engineers, identifying vulnerabilities across the application and system level. You will own pieces of client engagements and develop tools alongside the team.

Your work will be hands-on and autonomous: analyzing complex code, building custom tooling, conducting threat modeling, and owning your findings through to client delivery.