About Trail of BitsTrail of Bits helps secure the world’s most targeted organizations and products
We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code
As a cybersecurity research and consulting firm, we serve clients in the defense, tech, finance, and blockchain industries
We help with their most difficult security challenges by designing and building new technology, researching new techniques to advance the state of practice, and reviewing the security of the latest available technology products before they hit the market
Our team consumes, produces, and presents research as a natural part of doing business
When we make new discoveries or developments, we strive to share our knowledge and release our tools as open-source
It’s a practice that’s earned us industry accolades and helped contribute to our double-digit bottom line growth
Role Our growing Assurance Practice is directing the future of blockchain security
We review blockchain code and smart contracts for security vulnerabilities
Between engagements, we build like Slither, Echidna, and Manticore to aid our process
What if all of the security tools for x86 that you would have liked to have built yourself, but mature versions already existed? Few of those tools have been built yet for blockchain architectures
Join us to make a career-defining contribution
 You will be at the forefront of blockchain security research
You will work alongside some of the greatest minds in the industry to review smart contracts, blockchain infrastructure code, and decentralized applications for security vulnerabilities, using both manual static analysis and our tool suite
In the time between your engagements, you will work on self-study materials to further your understanding of the code, environment, and techniques used in professional software assurance audits
For the duration of the apprenticeship, you will be shadowing a senior security engineer, practicing in the off-hours, and reading on your own
This is an intensive 3-month program designed to replace the two years of experience typically required of a Trail of Bits engineer; it is not an internship
You will be mentored by one of our senior security engineers, who will share their experience and help you to grow with us
This opportunity is intended for exceptional entry – to mid-level professionals with experience in blockchain programming or auditing
The ideal candidate is self-driven and is likely already learning how to use our tools and studying new programming languages
We value communication with both Trail of Bits team members and customers, so you should enjoy working as part of a team
Responsibilities
- Be a member of our auditing team reviewing customer source code
- Learn and contribute to our reporting processes
- Remain engaged and focused while working closely with one of our senior security engineers
- Gain a thorough understanding of solidity smart contract development
- Become proficient in analyzing smart contract security
- Maintain open communications with your mentor on tasking and learning objectives
Requirements
- Three months of experience in blockchain engineering or solidity security
- Complete knowledge of the most common smart contracts vulnerabilities (reentrancy, front-running, arithmetic issues)
- Fluency in Solidity development and deployment of smart contracts
- Completed Ethernaut and Damn Vulnerable DeFi or have similar experience
- The position has no location restriction, but does require overlap with EST working hours
- Understanding of the Ethereum Virtual Machine and Yellow Paper
- Great written and spoken communication skills
- We highly encourage all engineers to get regular face-time with customers, to write company blog posts about their accomplishments, and to deliver presentations to the technical community
- Any public contributions to auditing tools is a plus
What You Will Receive In Return
- During the apprenticeship, you will be paid as an entry-level Security Engineer at a competitive monthly rate
- In addition to the world-class training and development provided by Trail of Bits staff, after the apprenticeship period is concluded, successful candidates will be offered a full-time role as a Security Engineer with Trail of Bits
Company Perks
- Before, during and after COVID-19, our workforce works flexibly
Many employees choose to work from home around the globe
As long as you deliver against your goals, we encourage you to harness your personal working style to let you work best
- Liberal expense policy for acquiring the equipment and software that help you do your job
If we need hardware to work effectively, we buy it
 - We offer exceptional and tailored technical, leadership and organizational training for our team members
Everyone is encouraged to identify additional opportunities for personal professional growth with working at Trail of Bits
- We routinely highlight the amazing work our employees do via our blog, product offerings, and conference talks
We celebrate you! - We're at the forefront of a number of markets and have the internal expertise and the ambition to capitalize on those opportunities
Our employees see their work in use and valued by many others
Benefits for US Employees
- Multiple generous health, vision, and dental insurance plans including no-monthly-premium options supporting individuals and families through JustWorks
- Ancillary benefits including life and disability insurance, pre-tax commuter benefits, free Citi Bike membership, access to a HealthAdvocate, a healthcare Flexible Spending Account (FSA), and a free One Medical membership
- 3-4 months paid parental leave
- 401k with 5% company matching through Betterment
- Moving expenses: $5,000k one-time
- Charitable donations matching up to $2,000
- One time $1,000 at home office expense stipend
- $500/year personal learning & development budget
 - Executive coaching for managers and above
- Options for coworking space (some restrictions may apply)
 - Bonuses for recruiting, public speaking, tool releases, blog posts, academic posters, proposals, and whitepapers, and end-of-year bonuses based on company, team, and personal performance
- 20 days of Paid Time Off (PTO) per year
- 14 company holidays per year
- Carbon offsets for your personal and corporate carbon emissions through Project Wren
- Manage your student loans right alongside your 401(k) in Betterment
Benefits for Canadian Employees
- Premium health, vision, and dental insurance plans
- Life/AD&D Insurance options, as well as short- and long-term disability insurance plans
- RRSP plan with 5% company matching
- Charitable donation matching up to USD $2000
- Bonuses for recruiting, public speaking, tool releases, blog posts, academic posters, proposals, and whitepapers, and end-of-year bonuses based on company, team, and personal performance
- 10 days of Paid Time Off (PTO) and 10 days of sick time per year
- 14 company holidays including provincial statutory holidays and select US holidays per year
- Carbon offsets for your personal and corporate carbon emissions through Project Wren
Dedication to diversity, equity & inclusionTrail of Bits is committed to creating and maintaining a diverse and inclusive workplace where our employees can thrive and be themselves! We welcome all persons into our community
We embrace the diversity of gender, gender identity or expression, race, color, religious creed, national origin, ancestry, age, physical and mental disabilities, medical condition, genetic characteristic, sexual orientation, marital status, family care or medical leave status, military or veteran status, or perceived membership in any of these groups