No applications. Teams find and message you directly.
Join Trail of Bits as a Senior Security Engineer in the Cryptography team, focusing on high-assurance software and cryptographic systems across various sectors. Competitive salary and comprehensive benefits offered.
Founded in 2012 by 3 expert hackers with no investment capital, Trail of Bits is the premier place for security experts to boldly advance security and address technology's newest and most challenging risks. It has helped secure some of the world's most targeted organizations and devices. Our combination of novel research with practical solutions reduces the security risks that our clients face from emerging technologies. Our work helps drive the security industry and the public understanding of the technology underlying our world. Cybersecurity preparedness is a moving target. Companies like ours are the tip of the spear in the fight against attackers. Our research-based and custom-engineering approach ensures that our client's capabilities are at the forefront of what's available. For companies and technologies that live and die by their security, a proactive, tailored approach is required to keep one step ahead of attackers. Democratizing security information is essential. As part of our business, we provide ongoing informational support through blogs, whitepapers, newsletters, meetups, and open-source tools. The more the community understands security, the more they'll understand why a company like ours is so unique and valuable.
- Lead cryptographic assessments. Review protocols, libraries, and application code; identify design and implementation weaknesses; validate exploitability; and recommend practical fixes.
- Analyze advanced constructions. Work across standardized symmetric and asymmetric cryptography, post-quantum schemes, zero-knowledge proof systems, and multi-party computation protocols, learning unfamiliar designs when an engagement demands it.
- Build useful tooling. Create or extend tools, test harnesses, and proofs of concept that improve cryptanalysis, implementation review, and repeatability across engagements.
- Own clear client delivery. Plan your work, surface risk early, lead technical discussions, and produce precise reports that explain both the finding and the engineering path forward.
- Shape the practice. Contribute to scoping and methodology, mentor other engineers, identify promising research or tooling opportunities, and help turn repeated client needs into stronger services.
- Share what you learn. Contribute to open-source projects and, when appropriate, publish technical work or present it to the security and cryptography communities.
- Applied cryptography depth. Substantial experience evaluating cryptographic primitives, protocols, and implementations, with the judgment to distinguish theoretical concerns from practical security failures.
- Mathematical fluency. A foundation strong enough to read relevant academic papers, reason about security assumptions, and translate research into implementation-level questions.
- Code review and development skill. Proficiency in at least one systems or security-oriented language such as Rust, Go, C, or C++, plus experience using Git-based development workflows.
- Assessment judgment. The ability to form and test hypotheses, recognize where specifications and implementations diverge, document evidence, and prioritize findings by real-world impact.
- Senior-level ownership. A record of independently driving complex technical work, managing ambiguity, making defensible decisions, and helping teammates improve their approach.
- Client communication. Clear writing and confident technical communication with engineers, researchers, and other stakeholders who will question assumptions and expect precise answers.
- Collaborative curiosity. A willingness to learn unfamiliar systems, share incomplete ideas early, and work closely with colleagues, clients, and the broader technical community.
- Competitive salary complemented by performance-based bonuses.
- Fully company-paid insurance packages, including health, dental, vision, disability, and life.
- A solid 401(k) plan with a 5% match of your base salary.
- 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations.
- 4 months of parental leave to cherish the arrival of new family members.
- $10,000 in relocation assistance if moving to NYC.
- $1,000 Working-from-Home stipend to create a comfortable and productive home office.
- Annual $750 Learning & Development stipend for continuous personal and professional growth.
- Company-sponsored all-team celebrations, including travel and accommodation, to foster community and recognize achievements.
- Philanthropic contribution matching up to $2,000 annually.