Senior Security Engineer, Cryptography

🕒 il y a 23 jours

🇺🇸 États-Unis – Télétravail

💵 $165 000 - $220 000 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 1%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Trail of Bits

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2012

🔒 Cybersecurity

☁️ SaaS

₿ Crypto

Cybersecurity • SaaS • Crypto

Trail of Bits est une entreprise de cybersécurité spécialisée dans la recherche en sécurité de haut niveau et les services d'assurance logicielle. Depuis sa création en 2012, l'entreprise s'efforce de sécuriser certaines des organisations les plus ciblées au monde en combinant des recherches scientifiques approfondies avec une mentalité de véritable attaquant. Trail of Bits propose des services d'assurance logicielle, d'ingénierie de sécurité et de recherche et développement, notamment dans les logiciels systèmes, la blockchain et la cryptographie. Ils offrent également des cours de formation spécialisés en rétro-ingénierie, tests d'intrusion et modélisation de menaces. Trail of Bits est reconnu comme l'un des meilleurs lieux de travail, reflétant son engagement envers la culture et la satisfaction des employés.

Description

• Lead cryptographic assessments of protocols, libraries, and application code. • Identify design and implementation weaknesses, validate exploitability, and recommend practical fixes. • Analyze standardized symmetric and asymmetric cryptography, post-quantum schemes, zero-knowledge proof systems, and multi-party computation protocols. • Create or extend tools, test harnesses, and proofs of concept for cryptanalysis and implementation review. • Plan work, surface risk early, lead technical discussions, and produce precise client reports. • Independently lead substantial portions of client engagements as a senior individual contributor. • Contribute to scoping, methodology, mentoring, research, tooling opportunities, open-source projects, technical publications, and presentations. • Collaborate with the Cryptography practice, Assurance team, client engineers, researchers, and other stakeholders. • Lead assessments from initial threat model through client readout. • Help clients make defensible engineering decisions about risk and remediation.

🎯 Exigences

• Substantial experience evaluating cryptographic primitives, protocols, and implementations. • Mathematical fluency sufficient to read academic papers, reason about security assumptions, and translate research into implementation-level questions. • Proficiency in at least one systems or security-oriented language such as Rust, Go, C, or C++. • Experience using Git-based development workflows. • Ability to form and test hypotheses, recognize specification/implementation divergence, document evidence, and prioritize findings by real-world impact. • Record of independently driving complex technical work, managing ambiguity, making defensible decisions, and helping teammates improve. • Clear writing and confident technical communication with engineers, researchers, and stakeholders. • Willingness to learn unfamiliar systems and collaborate with colleagues, clients, and the broader technical community. • Experience assessing post-quantum, zero-knowledge, threshold, multiparty-computation, or privacy-preserving systems is nice to have. • Published research, open-source contributions, public audit reports, conference talks, or technical writing is nice to have. • Experience designing cryptographic APIs, reviewing protocol specifications, or moving research implementations toward production use is nice to have. • Experience scoping security engagements, mentoring engineers, or developing repeatable assessment methodologies is nice to have. • Must be eligible for employment verification through E-Verify requirements for U.S.-based employment.

🏖️ Avantages

• Competitive salary complemented by performance-based bonuses. • Fully company-paid insurance packages, including health, dental, vision, disability, and life. • A solid 401(k) plan with a 5% match of your base salary. • 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations. • 4 months of parental leave. • $10,000 in relocation assistance for moving to NYC. • $1,000 Working-from-Home stipend. • Annual $750 Learning & Development stipend. • Company-sponsored all-team celebrations, including travel and accommodation. • Philanthropic contribution matching up to $2,000 annually.