Senior Security Engineer, Cryptography

🔥 2 minutes ago

🇺🇸 United States – Remote

💵 $165k - $220k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Trail of Bits

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

🔒 Cybersecurity

☁️ SaaS

₿ Crypto

Cybersecurity • SaaS • Crypto

Trail of Bits is a company that specializes in software security and assurance. Established in 2012, it has assisted some of the most targeted organizations worldwide in securing their systems. Trail of Bits combines advanced security research with a practical attacker mindset to reduce risk and strengthen software code. The company offers services in software assurance, security engineering, and research and development, focusing on areas such as blockchain, cryptography, and mobile device security. They also provide expert training courses to enhance understanding of various security aspects like penetration testing and threat modeling.

📋 Description

• Lead cryptographic assessments of protocols, libraries, and application code. • Identify design and implementation weaknesses, validate exploitability, and recommend practical fixes. • Analyze standardized symmetric and asymmetric cryptography, post-quantum schemes, zero-knowledge proof systems, and multi-party computation protocols. • Create or extend tools, test harnesses, and proofs of concept for cryptanalysis and implementation review. • Plan work, surface risk early, lead technical discussions, and produce precise client reports. • Independently lead substantial portions of client engagements as a senior individual contributor. • Contribute to scoping, methodology, mentoring, research, tooling opportunities, open-source projects, technical publications, and presentations. • Collaborate with the Cryptography practice, Assurance team, client engineers, researchers, and other stakeholders. • Lead assessments from initial threat model through client readout. • Help clients make defensible engineering decisions about risk and remediation.

🎯 Requirements

• Substantial experience evaluating cryptographic primitives, protocols, and implementations. • Mathematical fluency sufficient to read academic papers, reason about security assumptions, and translate research into implementation-level questions. • Proficiency in at least one systems or security-oriented language such as Rust, Go, C, or C++. • Experience using Git-based development workflows. • Ability to form and test hypotheses, recognize specification/implementation divergence, document evidence, and prioritize findings by real-world impact. • Record of independently driving complex technical work, managing ambiguity, making defensible decisions, and helping teammates improve. • Clear writing and confident technical communication with engineers, researchers, and stakeholders. • Willingness to learn unfamiliar systems and collaborate with colleagues, clients, and the broader technical community. • Experience assessing post-quantum, zero-knowledge, threshold, multiparty-computation, or privacy-preserving systems is nice to have. • Published research, open-source contributions, public audit reports, conference talks, or technical writing is nice to have. • Experience designing cryptographic APIs, reviewing protocol specifications, or moving research implementations toward production use is nice to have. • Experience scoping security engagements, mentoring engineers, or developing repeatable assessment methodologies is nice to have. • Must be eligible for employment verification through E-Verify requirements for U.S.-based employment.

🏖️ Benefits

• Competitive salary complemented by performance-based bonuses. • Fully company-paid insurance packages, including health, dental, vision, disability, and life. • A solid 401(k) plan with a 5% match of your base salary. • 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations. • 4 months of parental leave. • $10,000 in relocation assistance for moving to NYC. • $1,000 Working-from-Home stipend. • Annual $750 Learning & Development stipend. • Company-sponsored all-team celebrations, including travel and accommodation. • Philanthropic contribution matching up to $2,000 annually.