Sign in Start free trial

Security Engineer 1, Application Security

Trail of Bits

Location: Remote
Workplace: Remote
Employment: Full Time
Salary: USD 100,000–160,000/yr

Apply on the employer’s site

Posted 2mo ago

The employer’s full description could not be read from their board. This is a summary of the posting — follow the apply link for the original.

Responsibilities

Lead security assessments for specific components
Identify vulnerabilities, trace root causes, and own analysis
Find and validate real vulnerabilities in application code and systems
Explain exploitation paths, assess impact, and develop proof-of-concept code
Design and build security testing tools and automation
Conduct threat modeling and architecture reviews of software systems
Identify attack surfaces, data flows, and security boundaries
Propose concrete mitigations
Translate technical findings into clear, actionable recommendations
Contribute to security research initiatives
Build tools, document findings, and stay on the cutting edge

Requirements

Demonstrable vulnerability research capability
Proven ability to find and validate real vulnerabilities
Strong code analysis skills
Ability to read complex code, trace execution, identify logic flaws
Hands-on coding proficiency in Rust, Go, C, C++, Python, JavaScript, or TypeScript
Understanding of memory corruption vulnerabilities and modern mitigations
Deep familiarity with operating systems, IPC, privilege boundaries
Autonomous problem-solving skills
Clear technical communication skills
0-2 years into security career or software engineering with security foundation

Preferred

Active CTF participation
Published vulnerability research (CVEs, bug bounties, disclosures)
Open source security contributions
Mobile security experience (Android, iOS, macOS)
Published technical writing (blog posts, research writeups, talks)
Cloud security experience (AWS, GCP, Azure)
Kernel or low-level development experience

Skills

Rust
Go
C
C++
Python
JavaScript
TypeScript
AWS
GCP
Azure

Similar roles