T

Trail of Bits

Cybersecurity research, auditing, and consulting

Engineering Director - Application Security

Engineering LeadershipConfirmed live in the last 24 hours
Full-timeRemote in USA

About the Job

Requirements

  • At least 10 years of security experience, including significant source code audit work rather than only penetration testing.
  • Recent demonstrable hands-on security work within the last 12 months, such as code review, vulnerability research, or tool development.
  • Experience leading a team of at least 8 engineers through client engagements with direct financial accountability.
  • Proficiency in at least four of Rust, Go, Python, C/C++, Solidity, and JavaScript/TypeScript.
  • A track record of managing project profitability, utilization, and staffing decisions in a consulting environment.
  • Experience building team members' careers and external visibility through conference talks, publications, or open-source contributions.
  • Proficiency with AI coding and analysis tools in one's own work.
  • Active contributions to the security community through research, tools, advisories, or publications.

Responsibilities

  • Lead the Application Security practice, comprising 12 security engineers who perform code audits, vulnerability research, and secure design reviews.
  • Personally review audit findings, guide technical approaches, and engage with sophisticated clients while performing source-code security work.
  • Own the quality and profitability of engagements; review findings, guide technical direction on complex audits, provide senior expertise when needed, and maintain direct relationships with key clients.
  • Make project assignment decisions balancing engineer development, client needs, and profitability; manage utilization, identify hiring needs, and build the recruiting pipeline through the intern program and recruiting.
  • Own the practice's profit and loss.
  • Develop engineers by creating opportunities to present at conferences, publish research, contribute to open-source tools, and advance their careers; identify and remove obstacles.
  • Set technical direction and decide investments in tooling, methodology, and capability development while remaining hands-on and adapting the practice to the threat landscape and client needs.
  • Champion and model AI tool use across team workflows, supporting AI-assisted auditing, reporting, and research.

About the Company

Trail of Bits

Cybersecurity research, auditing, and consulting

Trail of Bits is a cybersecurity research and consulting firm that provides high-end security assurance and engineering services for technology, defense, finance, and blockchain clients. Its work includes security audits, threat modeling, reverse engineering, static and dynamic analysis, fuzzing, and cryptography, supported by a blockchain security center auditing protocols like Ethereum 2.0 and Zcash. It differentiates itself by assigning senior researchers to every client engagement, maintaining a strong open-source footprint with tools such as Slither, Echidna, and Manticore, and pursuing public security research alongside client work. The company aims to raise the security bar for complex software and systems and to build trusted audit practices for leading organizations and governments.

Company size
51-200
Company stage
Seed
Total funding
$12.8M
Headquarters
New York City, New York
Founded
2012

Recently Posted Jobs

Explore more opportunities at Trail of Bits

See more jobs