Product Security Engineer

🕒 October 1

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 17%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

TRM Labs

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2018

₿ Crypto

📋 Compliance

🤝 B2B

Crypto • Compliance • B2B

TRM Labs is a blockchain intelligence company that provides transaction-monitoring, forensics, and compliance solutions for businesses and public-sector organizations dealing with cryptocurrencies. Their platform and products (examples: Compliance360, Investigation360, Seizure360, Supervision360, BlockInt API, MCP, wallet screening, Know-Your-Asset) help banks, crypto firms, regulators, law enforcement, and tax authorities detect, investigate, and block illicit crypto activity, support seizures, and meet AML/CTF and supervision requirements. TRM also offers training and certification (TRM Academy) and professional services such as incident response and capacity development.

📋 Description

• Lead application security reviews and threat modeling, including secure code review, architectural design, and testing • Develop automated testing and mature the Secure SDLC • Own and perform application security vulnerability management • Coordinate penetration testing engagements • Develop application security best practices for software engineers and product teams • Develop and maintain the bug bounty program • Bootstrap platform security initiatives that protect TRM data • Foster security champions within engineering teams • Coordinate secure code training and inspire a culture of security across engineering • Perform rapid threat assessments and triage vulnerabilities based on business risk • Integrate security testing and reviews into the Product Shipping Framework and CI/CD pipelines • Provide just-in-time security training, real-time advice, and code reviews • Optimize lightweight security tools for efficient development and deployment • Collaborate closely with engineering and engineering leadership

🎯 Requirements

• Minimum 8 years of experience in Software Development and testing • BS (or equivalent) in Computer Science, Computer Engineering, or related field • Proficiency in Python, NodeJS, and React • Strong understanding of encryption, authentication, and authorization protocols • Deep experience with OWASP, CWE, testing methodologies, and security testing tools • Experience with security solutions for cloud providers such as GCP and AWS • Experience with secure software development lifecycles, threat modeling, and security best practices • Experience conducting comprehensive code security reviews • Experience triaging and remediating vulnerabilities in software packages or libraries • Experience with GitHub Advanced Security or other SAST, DAST, and SCA tools • Experience with web application testing frameworks such as Burp Suite and OWASP ZAP • Experience with threat modeling tools such as OWASP Threat Dragon • Experience working in an agile-based software development role • Experience red teaming or penetration testing applications and infrastructure • Strong written and verbal communication skills • Security certifications such as OSCP, CEH, and GWAPT are a plus • Familiarity with security frameworks such as NIST SP 800-171 and SSDF is a plus • Ability to work in a distributed environment across EST, PST, and CEST time zones

🏖️ Benefits

• Competitive benefits, wellness programs, and time away from work, varying by country and local employment requirements • Distributed-first remote work environment • Reasonable accommodations for applicants with disabilities • Professional growth and development through meaningful, mission-driven work