Senior Application Security Engineer

TRM Labs; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

TRM Labs is seeking an experienced Application Security Engineer to build and secure mission‑critical software platforms. You will lead threat modeling, secure code reviews, and automated security tests across TRM’s products.

You will coordinate penetration testing, drive secure SDLC practices, and mentor engineers to adopt security best practices while expanding our bug bounty program and platform protections.

Qualifications

• 8+ years in software development and testing.
• BS in CS, Computer Engineering, or related field.
• Proficient in Python, NodeJS, and React.
• Strong encryption, authentication, and authorization knowledge.
• Experience with OWASP, CWE, testing methodologies and security tools.
• Cloud experience with GCP/AWS and secure SDLC practices.
• Regular code security reviews and vulnerability triage/remediation.
• Experience with BurpSuite, OWASP ZAP, SAST/DAST/SCA tools.
• Threat modeling with OWASP Threat Dragon; agile background.
• Red Teaming or pentesting experience; security certifications a plus.
• Familiarity with NIST SP 800-171 SSDF a plus.

Responsibilities

• Lead application security reviews and threat modeling, including secure code review, architectural design, and testing
• Develop automated testing and mature our Secure SDLC
• Own and perform application security vulnerability management
• Coordinate penetration testing engagements
• Support engineers and product teams by developing app security best practices
• Develop and maintain the bug bounty program
• Bootstrap platform security initiatives to protect TRM data
• Foster security champions and secure code training across engineering

Skills

Python

NodeJS

React

Encryption & auth

Threat modeling

Secure SDLC

Code reviews

Agile

Cloud security

Security tooling

Communication

Red Teaming

Security certifications

Education

BS in Computer Science / Computer Engineering / related field

Tools

BurpSuite

OWASP ZAP

OWASP Threat Dragon

GitHub Advanced Security

Job description

TRM Labs is seeking an experienced Application Security Engineer to build and secure mission‑critical software platforms. You will lead threat modeling, secure code reviews, and automated security tests across TRM’s products.

You will coordinate penetration testing, drive secure SDLC practices, and mentor engineers to adopt security best practices while expanding our bug bounty program and platform protections.