RemoteLeaf Logo
Log in Sign up

Security Engineer II, Application Security

3 hours, 44 minutes ago
United States
Full-time
Junior
Application Security Engineer
Software Development
Ansible C C++ Cybersecurity Go Helm JavaScript Kubernetes Python Rust Terraform TypeScript
Apply Now
Trail of Bits

Trail of Bits

Trail of Bits is a leading company specializing in computer and network security. Since 2012, they have been helping secure the world's most targeted organizations and products by combining high-end security research with a real-world attacker mentalit...

Internet Software & Services
51-250
Founded 2012
View All Jobs 5

Description

  • Independently lead substantial components of client security assessments from scoping through delivery.
  • Discover and validate vulnerabilities, determine root causes and exploitation paths, assess impact, and develop proof-of-concept code when appropriate.
  • Design and build security tools, harnesses, tests, and automation to improve assessment coverage and repeatability.
  • Review software architecture, attack surfaces, data flows, trust boundaries, and privilege boundaries, and recommend mitigations.
  • Produce clear findings, defend technical evidence, and lead discussions with client engineering teams.
  • Review teammates’ code and analysis, share techniques, and improve the team’s technical approach.
  • Contribute research methods, open-source tools, and technical writing to Trail of Bits and the security community.

Requirements

  • Typically 2+ years of relevant experience in application security, vulnerability research, security-focused software engineering, or a related area.
  • Demonstrated experience personally discovering or validating vulnerabilities, including assessing exploitability, impact, and false positives.
  • Strong code-analysis skills across unfamiliar and complex codebases, including execution and data-flow tracing.
  • Strong programming and debugging ability in at least two relevant languages, such as Rust, Go, C, C++, Python, JavaScript, or TypeScript.
  • Working knowledge of memory-corruption vulnerabilities, exploit primitives, and mitigations.
  • Strong systems knowledge covering operating systems, IPC, privilege boundaries, and system internals.
  • Ability to independently scope and execute code-level security assessment workstreams and deliver documented findings.
  • Clear written and verbal communication skills for technical discussions with clients and distributed teams.
  • Experience with CTFs, vulnerability research, CVEs, responsible disclosures, bug bounties, or technical writeups is preferred.
  • Experience with mobile security, cloud infrastructure, Kubernetes, Terraform, kernel work, reverse engineering, fuzzing, symbolic execution, or mentoring is preferred.

Benefits

  • Base salary of $140,000–$180,000 plus a performance-based bonus.
  • Fully company-paid health, dental, vision, disability, and life insurance.
  • 401(k) plan with a 5% base-salary match.
  • 20 days of paid vacation, with flexibility for more where permitted.
  • Four months of parental leave.
  • Remote-first work environment with a $1,000 home-office stipend.
  • Annual $750 learning and development stipend.
  • $10,000 relocation assistance for employees moving to NYC and philanthropic matching up to $2,000 annually.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Coforge

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Peru Mid Level Application Security Engineer
Azure Git GitHub
3 hours, 14 minutes ago
Quanata

Staff Security Engineer [Remote-US]

Quanata 201-500 information technology & services

Quanata, LLC is seeking a Staff Security Engineer to secure AI-enabled systems, applications, cloud infrastructure, and platforms while shaping security standards and initiatives across the organization.

United States Full-time Lead Application Security Engineer
$290k-$400k
AWS CI/CD Cybersecurity DevSecOps Docker Generative AI GitHub Actions Go Java JavaScript Jenkins Kubernetes Machine Learning Python Secrets Management SIEM Terraform TypeScript
1 day, 3 hours ago
Chainguard

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

United States Full-time Senior Application Security Engineer
$157k-$184k
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
6 days, 3 hours ago
Bugcrowd

Product Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a Security Engineer to partner with engineering and product teams remotely, building secure-by-default systems and driving measurable application security outcomes.

Costa Rica Full-time Mid Level Application Security Engineer
AWS Docker GCP Go Java Kubernetes Python Ruby Terraform
1 week, 5 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers