Security Engineer II - Remote App Security & Tooling

Trail of Bits; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Retirement plan with 5% match

Learning & development stipend

Paid time off (PTO)

Parental leave (4 months)

Relocation assistance to NYC ($10,000)

Job summary

Trail of Bits seeks a Security Engineer II for the Application Security practice. You will independently own assessment work, identify vulnerabilities, and develop tooling while coordinating with clients and the team.

You will analyze complex code and communicate findings clearly to engineers and stakeholders. The role is remote within the United States and offers a comprehensive benefits package including health insurance, 401(k) with match, and professional development stipends.

Qualifications

• 2+ years of directly relevant experience in application security or vulnerability research.
• Ability to talk through vulnerabilities you have found and how you exploited or mitigated them.
• Strong code-analysis skills across complex codebases and data flows.
• Proficiency in multiple programming languages used in security analysis (e.g., Rust, Go, C, Python, JS).

Responsibilities

• Lead security assessments of major components or modules in client engagements.
• Identify vulnerabilities, establish root causes and exploitation paths, validate findings.
• Develop custom tooling, tests, or automation to expand assessment coverage.
• Deliver clear, actionable findings and defend evidence to client engineers.

Skills

Vulnerability research

Code analysis

Tool development

Threat modeling

Client communication

Team collaboration

Independent judgment

Tools

Kubernetes

Helm

Terraform

Ansible

Job description

Trail of Bits seeks a Security Engineer II for the Application Security practice. You will independently own assessment work, identify vulnerabilities, and develop tooling while coordinating with clients and the team.

You will analyze complex code and communicate findings clearly to engineers and stakeholders. The role is remote within the United States and offers a comprehensive benefits package including health insurance, 401(k) with match, and professional development stipends.