Trail of Bits helps secure the worldâs most targeted organizations and products. We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code.
As a cybersecurity research and consulting firm, we serve clients in the defense, tech, finance, and blockchain industries. We help with their most difficult security challenges by designing and building new technology, researching new techniques to advance the state of practice, and reviewing the security of the latest available technology products before they hit the market.
Our team consumes, produces, and presents research as a natural part of doing business. When we make new discoveries or developments, we strive to share our knowledge and release our tools as open source. Itâs a practice thatâs earned us industry accolades and helped contribute to our double-digit bottom-line growth.
Role
Our Assurance team is responsible for reviewing low-level, high-assurance software in the finance, tech, defense, and blockchain industries. Our evaluations enable our clients to make informed decisions about the risks to their systems and the security-relevant modifications that may be necessary for a secure deployment.
Using our custom tools and unique expertise, we serve as a knowledgeable, dedicated resource to identify vulnerabilities that would otherwise go undetected. In addition to providing security-based recommendations that improve resistance to attacks, we seek to deliver application-specific and industry-leading security engineering tools that exemplify the results of our assessments.
As a cryptography analyst, you will be part of a small dynamic team that both engineers and reviews mission-critical cryptographic code. You will help clients ensure that the implementation of novel cryptographic schemes is secure, protecting the safety and privacy of their users and increasing trust in their systems. You will encounter a wide variety of technologies and collaborate on the development of new cryptanalysis tools. You may assist with topics ranging from standardized symmetric cryptography to elliptic curve pairings and lattice-based post-quantum algorithms. You may also collaborate with academics to make their cutting-edge ideas a reality.
You will directly impact the growth of the Trail of Bits Assurance practice while providing cryptography expertise to our clients and working alongside some of the industryâs best and brightest. You will independently manage everything you do and play a key role in conceiving new projects and driving the cryptography team forward. You will be an active member of the open-source cryptography community with the resources to directly influence the development landscape.
The base salary range for this role is $125,000-$250,000 DOE.
Responsibilities
Perform code audits and cryptanalysis across a wide range of technologies for our clients.
Produce public reports detailing our reviews and their findings.
Develop new tools for assessing the security of cryptographic libraries.
Help secure new clients and acquire grants to create new cryptography tooling.
Remain up to date on the latest research in cryptography and security.
Assist to conceive new projects for the cryptography team.
Requirements
1â2 years of experience in applied cryptography and cryptanalysis.
A math background sufficient for reading relevant academic research.
Familiarity with the Git (and GitHub) workflow for development.
Proficiency in one or more of the following programming languages (in order of preference): Rust, Go, C++, C, or Python. Bonus points for OCaml experience.
A clear communicator who is quick to participate in deep technical discussions.
A self-motivated team member able to drive new projects.
Desire to learn new technologies.
Ability to communicate complex technical material to clients and non-technical team members.
Great written and verbal communication skills; We highly encourage all engineers to engage in regular face time with clients, to write company blog posts about their accomplishments, and to deliver presentations to the technical community.
Company Perks
Before, during and after COVID-19, our workforce works flexibly. Many employees choose to work from home around the globe. As long as you deliver against your goals, we encourage you to harness your personal working style to let you work best.
Liberal expense policy for acquiring the equipment and software that help you do your job. If we need hardware to work effectively, we buy it.
We offer exceptional and tailored technical, leadership and organizational training for our team members. Everyone is encouraged to identify additional opportunities for personal professional growth with working at Trail of Bits.
We routinely highlight the amazing work our employees do via our blog, product offerings, and conference talks. We celebrate you!
We're at the forefront of a number of markets and have the internal expertise and the ambition to capitalize on those opportunities. Our employees see their work in use and valued by many others.
Benefits for US Employees
Multiple generous health, vision, and dental insurance plans including no-monthly-premium options supporting individuals and families through JustWorks.
Ancillary benefits including life and disability insurance, pre-tax commuter benefits, free Citi Bike membership, access to a HealthAdvocate, a healthcare Flexible Spending Account (FSA), and a free One Medical membership.
4 months paid parental leave.
401k with 5% company matching through Betterment.
Moving expenses: $5,000 one-time.
Charitable donations matching up to $2,000.
One time $1,000 at home office expense stipend.
$500/year personal learning & development budget.
Executive coaching for managers and above.
Options for coworking space (some restrictions may apply).
Bonuses for recruiting, public speaking, tool releases, blog posts, academic posters, proposals, and whitepapers, and end-of-year bonuses based on company, team, and personal performance.
20 days of Paid Time Off (PTO) per year.
14 company holidays per year.
Carbon offsets for your personal and corporate carbon emissions through Project Wren.
Manage your student loans right alongside your 401(k) in Betterment.
Benefits for Canadian Employees
Premium health, vision, and dental insurance plans.
Life/AD&D Insurance options, as well as short- and long-term disability insurance plans.
RRSP plan with 5% company matching.
Charitable donation matching up to USD $2000.
Bonuses for recruiting, public speaking, tool releases, blog posts, academic posters, proposals, and whitepapers, and end-of-year bonuses based on company, team, and personal performance.
10 days of Paid Time Off (PTO) and 10 days of sick time per year.
14 company holidays including provincial statutory holidays and select US holidays per year.
Carbon offsets for your personal and corporate carbon emissions through Project Wren.
Dedication to diversity, equity & inclusion
Trail of Bits is committed to creating and maintaining a diverse and inclusive workplace where our employees can thrive and be themselves! We welcome all persons into our community. We embrace the diversity of gender, gender identity or expression, race, color, religious creed, national origin, ancestry, age, physical and mental disabilities, medical condition, genetic characteristic, sexual orientation, marital status, family care or medical leave status, military or veteran status, or perceived membership in any of these groups.
Please mention the word CLEARS and tag RNzkuMzUuMTc0LjEyNA== when applying to show you read the job post completely (#RNzkuMzUuMTc0LjEyNA==). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.