Security Engineer, Application Security

🕒 il y a 2 mois

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Trail of Bits

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2012

🔒 Cybersecurity

☁️ SaaS

₿ Crypto

Cybersecurity • SaaS • Crypto

Trail of Bits est une entreprise de cybersécurité spécialisée dans la recherche en sécurité de haut niveau et les services d'assurance logicielle. Depuis sa création en 2012, l'entreprise s'efforce de sécuriser certaines des organisations les plus ciblées au monde en combinant des recherches scientifiques approfondies avec une mentalité de véritable attaquant. Trail of Bits propose des services d'assurance logicielle, d'ingénierie de sécurité et de recherche et développement, notamment dans les logiciels systèmes, la blockchain et la cryptographie. Ils offrent également des cours de formation spécialisés en rétro-ingénierie, tests d'intrusion et modélisation de menaces. Trail of Bits est reconnu comme l'un des meilleurs lieux de travail, reflétant son engagement envers la culture et la satisfaction des employés.

Description

• Conduct comprehensive low-level code security assessments across applications. • Design and implement custom security tools for automated vulnerability detection. • Perform detailed architecture reviews and threat modeling of software systems and cloud environments. • Work directly with industry-leading teams to review their application infrastructure and architecture. • Contribute to the advancement of application security, developing new methodologies and tools.

🎯 Exigences

• Application security assessment experience. • Manual code review depth. • Static and dynamic analysis fluency. • Binary analysis and reverse engineering. • Memory corruption vulnerabilities and mitigations. • System internals and security boundaries. • Architecture review and threat modeling. • Security tool development experience. • Programming proficiency across multiple languages. • Communicating findings to technical stakeholders. • **Nice to Have** • Experience with Android, iOS, or macOS system internals. • Experience contributing to open source security tools, libraries, or research. • Experience publishing original vulnerability research, CVEs, or technical writeups. • Experience speaking at security conferences (DEF CON, Black Hat, BSides, OffensiveCon, RECon, etc.). • Experience identifying security misconfigurations in cloud environments (AWS, GCP, Azure). • Experience collaborating on government-funded security research (DARPA, IARPA, ONR, etc.).

🏖️ Avantages

• Competitive salary complemented by performance-based bonuses. • Fully company-paid insurance packages, including health, dental, vision, disability, and life. • A solid 401(k) plan with a 5% match of your base salary. • 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations. • 4 months of parental leave to cherish the arrival of new family members. • $10,000 in relocation assistance if moving to NYC. • $1,000 Working-from-Home stipend to create a comfortable and productive home office. • Annual $750 Learning & Development stipend for continuous personal and professional growth. • Company-sponsored all-team celebrations, including travel and accommodation, to foster community and recognize achievements. • Philanthropic contribution matching up to $2,000 annually.