About The Role: 

The SandboxAQ team is looking for a security engineer to help functionalize the next generation of cybersecurity systems. A successful candidate will help ensure that the solutions are designed and developed in a secure manner, according to best practices. The candidate will also conduct technical security assessments, code reviews and vulnerability testing, in collaboration with the other teams, to improve security aspects. They will be part of a diverse team consisting of cryptographers, mathematicians, ML experts, and physicists, where they will play a key role in efficient and effective enablement of the technologies being developed.

Core Responsibilities

• Analyze and discover security vulnerabilities in both proprietary and open-source software
• Develop security tools for solutions protection, monitoring, remediation and reporting
• Conduct security reviews of both testing and production infrastructure
• Provide security expertise and guidance to the research, engineering and business teams
• Lead internal security process at Sandbox
• ~20-40% travel to client site near Washington, DC

Minimum Qualifications

• US Citizenship and/or security clearance is required due to USG contract requirements
• Experience developing in C/C++ and Python on Linux hosts
• Deep expertise in vulnerability testing, code auditing and reporting
• Excellent understanding of security engineering, computer and network security, applied cryptography and security protocols
• Ability to work in a small team / rapid prototyping environment and deal with uncertainty and fluidity

Preferred Qualifications

• Solid experience with compliance regulations: interpretation and implementation of standards as well as audit collection
• Strong knowledge of the current threat landscape, including common attack types and malware capabilities
• Ability to utilize static analysis and fuzzing tools
• Proficiency in using reverse engineering tools (e.g., IDA Pro, Ghidra)
• Track record of publications, talks and/or CVEs