Description:

Trail of Bits is seeking a Senior Security Engineer, Application Security to join their Software Assurance practice.
The role involves conducting comprehensive security assessments of client software, focusing on low-level code analysis, system architecture, security boundaries, access controls, and platform security mechanisms.
Daily tasks may include analyzing vulnerabilities in application code, automating detection of security misconfigurations in cloud environments, assessing privilege escalation capabilities, and reviewing security boundaries in complex systems.
The position requires collaboration with other security engineers and opportunities to work with the Research & Engineering team to secure funding for advanced security research.
Responsibilities include conducting security assessments, developing custom security tools, performing architecture reviews, engaging with clients, and contributing to research and innovation in application security.

Requirements:

Candidates must have extensive experience in software security, with the ability to identify and mitigate application and system-level vulnerabilities in complex enterprise software.
A track record of conducting technical security assessments, including software and system hardening and security policy analysis, is required; experience with Android, iOS, and/or macOS system internals is a plus.
Deep understanding of system internals and security boundaries, along with experience in manual code reviews, static and dynamic analysis tools, and secure development practices is essential.
Proficiency in multiple programming languages such as Rust, Golang, Kotlin, Swift, Objective-C, JavaScript/TypeScript, Python, Ruby, C, and/or C++ is necessary for security analysis and tool development.
Strong communication skills are required to effectively convey complex security concepts to diverse stakeholders and provide clear, actionable recommendations.

The position offers a competitive salary with performance-based bonuses and fully company-paid insurance packages, including health, dental, vision, disability, and life.
Employees benefit from a solid 401(k) plan with a 5% match of their base salary and 20 days of paid vacation, with flexibility for more.
Parental leave of 4 months is provided, and relocation assistance of $10,000 is available for those moving to NYC.
A $1,000 Working-from-Home stipend and an annual $750 Learning & Development stipend are included to support personal and professional growth.
The company matches philanthropic contributions up to $2,000 annually and fosters a remote-first culture built on autonomy and trust.