Security Engineer 1, Application Security

🕒 il y a 1 mois

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Trail of Bits

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2012

🔒 Cybersecurity

☁️ SaaS

₿ Crypto

Cybersecurity • SaaS • Crypto

Trail of Bits est une entreprise de cybersécurité spécialisée dans la recherche en sécurité de haut niveau et les services d'assurance logicielle. Depuis sa création en 2012, l'entreprise s'efforce de sécuriser certaines des organisations les plus ciblées au monde en combinant des recherches scientifiques approfondies avec une mentalité de véritable attaquant. Trail of Bits propose des services d'assurance logicielle, d'ingénierie de sécurité et de recherche et développement, notamment dans les logiciels systèmes, la blockchain et la cryptographie. Ils offrent également des cours de formation spécialisés en rétro-ingénierie, tests d'intrusion et modélisation de menaces. Trail of Bits est reconnu comme l'un des meilleurs lieux de travail, reflétant son engagement envers la culture et la satisfaction des employés.

Description

• Security Assessment Ownership - Lead security assessments for specific components within client engagements. • Vulnerability Discovery and Analysis - Find and validate vulnerabilities in application code and systems. • Custom Security Tooling - Design and build security testing tools and automation for vulnerability detection. • Architecture and Threat Modeling - Conduct threat modeling and architecture reviews of software systems. • Client Communication - Translate technical findings into clear, actionable recommendations for engineering teams. • Research and Innovation - Contribute to security research initiatives and stay on the cutting edge.

🎯 Exigences

• Demonstrable vulnerability research capability - Proven ability to find and validate real vulnerabilities. • Strong code analysis skills - You can read complex code, trace execution, identify logic flaws, and explain vulnerabilities. • Hands-on coding proficiency - Fluent in at least two of: Rust, Go, C, C++, Python, JavaScript, TypeScript, or similar. • Memory safety understanding - You understand memory corruption vulnerabilities and modern mitigations. • Systems knowledge - Deep familiarity with operating systems, IPC, privilege boundaries, and system internals. • Autonomous problem-solving - You drive your own work and ask good questions. • Clear technical communication - You can explain complex security findings to engineers.

🏖️ Avantages

• Competitive salary complemented by performance-based bonuses. • Fully company-paid insurance packages, including health, dental, vision, disability, and life. • A solid 401(k) plan with a 5% match of your base salary. • 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations. • 4 months of parental leave to cherish the arrival of new family members. • $10,000 in relocation assistance to support your transition to NYC. • $1,000 Working-from-Home stipend to create a comfortable home office. • Annual $750 Learning & Development stipend for continuous growth. • Company-sponsored all-team celebrations to foster community and recognize achievements. • Philanthropic contribution matching up to $2,000 annually.