Senior Security Engineer Cryptography

10 hours, 29 minutes ago
Full-time
Senior
Software Development
Trail of Bits

Trail of Bits

Trail of Bits is a leading company specializing in computer and network security. Since 2012, they have been helping secure the world's most targeted organizations and products by combining high-end security research with a real-world attacker mentalit...

Internet Software & Services
51-250
Founded 2012

Description

  • Lead cryptographic assessments of protocols, libraries, and application code, identifying weaknesses and recommending practical fixes.
  • Analyze symmetric, asymmetric, post-quantum, zero-knowledge, and multiparty-computation systems.
  • Build tools, test harnesses, and proofs of concept to improve cryptanalysis and assessment efficiency.
  • Plan engagements, identify risks early, lead technical discussions, and deliver precise client reports.
  • Contribute to assessment methodology, service development, mentoring, and technical practice improvements.
  • Collaborate with client engineers and internal specialists to support sound remediation decisions.
  • Contribute to open-source projects, research publications, and presentations when appropriate.

Requirements

  • Substantial applied experience evaluating cryptographic primitives, protocols, and implementations.
  • Strong mathematical foundation for interpreting research and reasoning about security assumptions.
  • Proficiency in Rust, Go, C, C++, or another systems/security-oriented language.
  • Experience with Git-based development workflows and code review.
  • Ability to test hypotheses, document evidence, identify specification-to-implementation gaps, and prioritize findings by impact.
  • Demonstrated ownership of complex technical work and sound judgment in ambiguous situations.
  • Strong technical writing and communication skills with engineers, researchers, and clients.
  • Must reside in and be authorized to work in the United States without employer sponsorship.
  • Experience with post-quantum, zero-knowledge, threshold, MPC, or privacy-preserving systems (preferred).
  • Research publications, open-source contributions, audit reports, protocol/API design, mentoring, or engagement-scoping experience (preferred).

Benefits

  • Base salary of $165,000–$220,000 plus potential performance bonus.
  • Fully company-paid health, dental, vision, disability, and life insurance.
  • 401(k) plan with a 5% base-salary match.
  • Remote-first work environment with 20 days of paid vacation.
  • Four months of parental leave.
  • $1,000 work-from-home stipend and $750 annual learning and development stipend.
  • $10,000 relocation assistance for employees moving to New York City.
  • Company-sponsored team events and philanthropic contribution matching up to $2,000 annually.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

DevSecOps Engineer

Sparksoft 51-250 Internet Software & Services

Sparksoft is hiring a DevOps and Cloud Infrastructure professional to support government clients by managing AWS infrastructure, deployment pipelines, configuration controls, and software release activities.

Agile AWS CI/CD Git GitHub Jenkins SonarQube SVN
9 hours, 14 minutes ago

Staff Information Security Engineer - AI First

Rithum Internet Software & Services

Rithum is hiring a Staff AI-First Information Security Engineer to secure its AI-powered products and workforce by building automated controls, guardrails, and workflows across cloud and enterprise environments.

AWS Cybersecurity Python SIEM Terraform
9 hours, 59 minutes ago

Cybersecurity & Software Engineering Specialist (AI Projects)

Gramian Consultancy Group Professional Services

Gramian Consultancy is seeking remote Cybersecurity and Software Engineering Specialists to debug code, identify vulnerabilities, improve backend systems, and provide technical insights for an AI training project.

C++ Cybersecurity Go Java Penetration Testing Python Rust TypeScript
10 hours, 29 minutes ago

Security Operations Engineer - PCI DSS

teamified.com Hotels, Restaurants & Leisure

A three-month contract Security Engineer will own the PCI DSS v4.0.1 compliance cycle for a cloud-hosted payments platform, implementing controls, preparing evidence, and completing executive sign-off alongside engineering and operations teams.

AWS Encryption JIRA Penetration Testing Secrets Management SIEM
10 hours, 29 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers