Security Engineer I, Application Security

🕒 Setembro 25

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $100.000 - $160.000 / ano

⏰ Tempo Integral

🟢 Júnior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

🚫👨‍🎓 Sem graduação necessária

👻 Score fantasma 1%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Trail of Bits

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2012

🔒 Cibersegurança

☁️ SaaS

₿ Cripto

Cybersecurity • SaaS • Crypto

A Trail of Bits é uma empresa especializada em segurança e garantia de software. Fundada em 2012, ajudou algumas das organizações mais visadas do mundo a proteger seus sistemas. A Trail of Bits combina pesquisa avançada em segurança com uma mentalidade prática de atacante para reduzir riscos e fortalecer o código. A empresa oferece serviços de garantia de software, engenharia de segurança e pesquisa e desenvolvimento (P&D), com foco em áreas como blockchain, criptografia e segurança de dispositivos móveis. Também oferece cursos de treinamento especializados para aprimorar o entendimento de diversos aspectos de segurança, como pentest (penetration testing) e modelagem de ameaças.

Descrição

• Contribute to security assessments of client software and partner with experienced engineers. • Lead review of a specific component, module, or system within larger client engagements. • Trace root causes and own analysis from vulnerability discovery through client delivery. • Find and validate vulnerabilities in application code and systems. • Explain exploitation paths, assess impact, and develop proof-of-concept code when appropriate. • Design and build security-testing tools and automation for vulnerability detection and deeper analysis. • Review software architectures, identify attack surfaces, data flows, trust boundaries, and privilege boundaries. • Recommend concrete security mitigations. • Translate technical findings into clear, actionable recommendations for engineering teams. • Explain evidence behind conclusions to clients. • Contribute to security research, open-source tools, internal knowledge sharing, and technical documentation.

🎯 Requisitos

• At least 1 year of combined relevant experience in application security, vulnerability research, security-focused software engineering, or a closely related area. • Demonstrable vulnerability-discovery capability, including personally finding or validating a vulnerability or security weakness. • Strong code-analysis skills, including reading unfamiliar code, tracing execution and data flow, identifying flaws, and validating vulnerabilities. • Hands-on coding proficiency in at least two relevant languages, such as Rust, Go, C, C++, Python, JavaScript, or TypeScript. • Working knowledge of memory-corruption vulnerabilities and common mitigations, including buffer overflows, use-after-free, stack cookies, ASLR, NX/DEP, CFI, or MTE. • Familiarity with operating-system concepts, IPC, privilege boundaries, and application interaction with system internals. • Ability to independently investigate a well-scoped problem, debug issues, document evidence, ask focused questions, and deliver work with project-lead review. • Clear written and verbal communication, including explaining technical findings and remediation guidance to software engineers and working productively on a distributed team. • Preferred: CTF participation, published vulnerability research/CVEs/responsible disclosures/bug bounty findings, open-source security contributions, mobile application security, cloud or infrastructure assessment, Kubernetes, Helm, Terraform, Ansible, kernel code, drivers, reverse engineering, fuzzing, low-level systems work, technical writing, conference talks, or substantial technical documentation. • U.S.-based candidates must meet employment eligibility verification requirements through E-Verify.

🏖️ Benefícios

• Competitive salary complemented by performance-based bonuses. • Fully company-paid insurance packages, including health, dental, vision, disability, and life. • A solid 401(k) plan with a 5% match of your base salary. • 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations. • 4 months of parental leave. • $10,000 in relocation assistance for moving to NYC. • $1,000 Working-from-Home stipend. • Annual $750 Learning & Development stipend. • Company-sponsored all-team celebrations, including travel and accommodation. • Philanthropic contribution matching up to $2,000 annually. • Remote-first culture for full-time employees.

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo