Product Security Engineer

🕒 il y a 15 jours

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 17%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

TRM Labs

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 2018

₿ Crypto

📋 Conformité

🤝 B2B

Crypto • Compliance • B2B

TRM Labs est une entreprise spécialisée dans l'intelligence blockchain qui fournit des solutions de surveillance de transactions, de services forensics et de conformité aux entreprises et organismes du secteur public traitant des cryptomonnaies. Leur plateforme et leurs produits (exemples : Compliance360, Investigation360, Seizure360, Supervision360, BlockInt API, MCP, wallet screening, Know-Your-Asset) aident les banques, les entreprises crypto, les régulateurs, les forces de l'ordre et les autorités fiscales à détecter, enquêter et bloquer les activités crypto illicites, soutenir les saisies, et répondre aux exigences de LBC/FT et de supervision. TRM propose également des formations et certifications (TRM Academy) ainsi que des services professionnels tels que la réponse aux incidents et le développement des capacités.

Description

• Lead application security reviews and threat modeling, including secure code review, architectural design, and testing • Develop automated testing and mature the Secure SDLC • Own and perform application security vulnerability management • Coordinate penetration testing engagements • Develop application security best practices for software engineers and product teams • Develop and maintain the bug bounty program • Bootstrap platform security initiatives that protect TRM data • Foster security champions within engineering teams • Coordinate secure code training and inspire a culture of security across engineering • Perform rapid threat assessments and triage vulnerabilities based on business risk • Integrate security testing and reviews into the Product Shipping Framework and CI/CD pipelines • Provide just-in-time security training, real-time advice, and code reviews • Optimize lightweight security tools for efficient development and deployment • Collaborate closely with engineering and engineering leadership

🎯 Exigences

• Minimum 8 years of experience in Software Development and testing • BS (or equivalent) in Computer Science, Computer Engineering, or related field • Proficiency in Python, NodeJS, and React • Strong understanding of encryption, authentication, and authorization protocols • Deep experience with OWASP, CWE, testing methodologies, and security testing tools • Experience with security solutions for cloud providers such as GCP and AWS • Experience with secure software development lifecycles, threat modeling, and security best practices • Experience conducting comprehensive code security reviews • Experience triaging and remediating vulnerabilities in software packages or libraries • Experience with GitHub Advanced Security or other SAST, DAST, and SCA tools • Experience with web application testing frameworks such as Burp Suite and OWASP ZAP • Experience with threat modeling tools such as OWASP Threat Dragon • Experience working in an agile-based software development role • Experience red teaming or penetration testing applications and infrastructure • Strong written and verbal communication skills • Security certifications such as OSCP, CEH, and GWAPT are a plus • Familiarity with security frameworks such as NIST SP 800-171 and SSDF is a plus • Ability to work in a distributed environment across EST, PST, and CEST time zones

🏖️ Avantages

• Competitive benefits, wellness programs, and time away from work, varying by country and local employment requirements • Distributed-first remote work environment • Reasonable accommodations for applicants with disabilities • Professional growth and development through meaningful, mission-driven work