About Trail of BitsTrail of Bits helps secure the world’s most targeted organizations and products
We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code
As a cybersecurity research and consulting firm, we serve clients in the defense, tech, finance, and blockchain industries
We help with their most difficult security challenges by designing and building new technology, researching new techniques to advance the state of practice, and reviewing the security of the latest available technology products before they hit the market
Our team consumes, produces, and presents research as a natural part of doing business
When we make new discoveries or developments, we strive to share our knowledge and release our tools as open source
It’s a practice that’s earned us industry accolades and helped contribute to our double-digit bottom-line growth
RoleThe primary responsibilities of this role are developing security-focused software and engaging with commercial clients / open-source communities
The focus areas are endpoint security, security agents, host telemetry, security engineering, vulnerability triage and remediation, build systems, logging pipelines, and associated security infrastructure
Software development will be primarily in C++, with frequent Python, and occasional opportunities to work in Go, Rust, or Swift
The role involves not just maintenance development, but also frequent creative and analytic challenges to design features and review existing implementations with a critical lens
 This is an engineering position, where the focus is to integrate novel features into production systems
It does not involve direct operations like service monitoring and maintenance
You will typically work in teams of 2-4 people, all from remote locations, in roughly 4-8 week development cycles
Technical leads will assign responsibilities to you and other team members, and you will develop proofs of concept, prototypes, and enhancements to existing tools in support of a project's goals
You will have opportunities to work for a variety of clients throughout a typical year
Frequent communication with team members and clients is essential to success, and writing about your work publicly is encouraged and incentivized
This is a fully remote position (travel rarely required)
The base salary range for this role is $125,000-$200,000 DOE
Responsibilities
- Root-cause analysis and debugging on low-level technical issues
- Contribute fixes and enhancements to large cross-platform codebases
- Interpret customer requirements, decompose tasks, and make engineering estimates
- Design and build solutions that balance performance, security, and functionality requirements
- Directly speak daily with your team typically within core hours and coordinate asynchronously outside of core hours to organize tasking
- Describe and explain technical concepts to clients, community, and co-workers
Requirements & Skills
- 3+ years of experience in professional software development in one or more of the following domains: desktop/server applications (CLI or GUI), backend security infrastructure, Linux or Windows kernel-mode development, endpoint security agents/daemons
- Experience applying modern C++ language features in your work
- Can work remotely and independently to set goals and find solutions
- Related development experience in a security monitoring, security testing, security response, vulnerability research, cryptography engineering or other security role is a plus
- Composure speaking or writing directly to customers to give status reports on progress and to solicit feedback and new requirements
- Previous experience in open-source projects is a plus
- Proficiency in system-level programming in C++ (required), Python (preferred)
Experience in Go, Rust, or Swift is a plus
Company Perks
- Before, during and after COVID-19, our workforce works flexibly
Many employees choose to work from home around the globe
As long as you deliver against your goals, we encourage you to harness your personal working style to let you work best
- Liberal expense policy for acquiring the equipment and software that help you do your job
If we need hardware to work effectively, we buy it
 - We offer exceptional and tailored technical, leadership and organizational training for our team members
Everyone is encouraged to identify additional opportunities for personal professional growth with working at Trail of Bits
- We routinely highlight the amazing work our employees do via our blog, product offerings, and conference talks
We celebrate you! - We're at the forefront of a number of markets and have the internal expertise and the ambition to capitalize on those opportunities
Our employees see their work in use and valued by many others
Benefits for US Employees
- Multiple generous health, vision, and dental insurance plans including no-monthly-premium options supporting individuals and families through JustWorks
- Ancillary benefits including life and disability insurance, pre-tax commuter benefits, free Citi Bike membership, access to a HealthAdvocate, a healthcare Flexible Spending Account (FSA), and a free One Medical membership
- 4 months paid parental leave
- 401k with 5% company matching through Betterment
- Moving expenses: $5,000 one-time
- Charitable donations matching up to $2,000
- One time $1,000 at home office expense stipend
- $500/year personal learning & development budget
 - Executive coaching for managers and above
- Options for coworking space (some restrictions may apply)
 - Bonuses for recruiting, public speaking, tool releases, blog posts, academic posters, proposals, and whitepapers, and end-of-year bonuses based on company, team, and personal performance
- 20 days of Paid Time Off (PTO) per year
- 14 company holidays per year
- Carbon offsets for your personal and corporate carbon emissions through Project Wren
- Manage your student loans right alongside your 401(k) in Betterment
Dedication to diversity, equity & inclusionTrail of Bits is committed to creating and maintaining a diverse and inclusive workplace where our employees can thrive and be themselves! We welcome all persons into our community
We embrace the diversity of gender, gender identity or expression, race, color, religious creed, national origin, ancestry, age, physical and mental disabilities, medical condition, genetic characteristic, sexual orientation, marital status, family care or medical leave status, military or veteran status, or perceived membership in any of these groups
About Trail of BitsTrail of Bits helps secure the world’s most targeted organizations and products
We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code
As a cybersecurity research and consulting firm, we serve clients in the defense, tech, finance, and blockchain industries
We help with their most difficult security challenges by designing and building new technology, researching new techniques to advance the state of practice, and reviewing the security of the latest available technology products before they hit the market
Our team consumes, produces, and presents research as a natural part of doing business
When we make new discoveries or developments, we strive to share our knowledge and release our tools as open-source
It’s a practice that’s earned us industry accolades and helped contribute to our double-digit bottom-line growth
Listed in: , , , , , , , , , , , , , ,