Trail of Bits, founded in 2012, is a leading cybersecurity company that combines novel research with practical solutions to reduce security risks for their clients. The company is seeking a Senior Software Security Engineer to join their Research & Engineering team, specifically the Compiler team. This role sits at the intersection of compiler technology, program analysis, and security engineering.
The position involves designing and implementing compiler-based security tools and frameworks across multiple compiler ecosystems, including LLVM, GCC, and JVM-based systems. The focus is on static and dynamic analysis techniques and formal verification approaches. Daily tasks might include developing new LLVM passes for security instrumentation, implementing formal verification tools, and enhancing program analysis frameworks for JIT compilers.
Working in small teams of 2-4 people, you'll collaborate with compiler experts, security researchers, and clients to solve complex security challenges at the infrastructure level. The role offers opportunities to pursue compiler security research while delivering practical solutions for clients. Development primarily involves C++, Rust, and LLVM toolchains.
The position offers competitive compensation ranging from $150,000 to $200,000, plus comprehensive benefits including fully paid insurance, 401(k) with 5% match, generous vacation time, and various stipends for professional development and remote work setup. Trail of Bits maintains a remote-first culture with over 100 employees working across all time zones globally.
The ideal candidate will bring strong compiler and program analysis expertise, experience with formal verification methods, and excellent development skills in languages like C++, Rust, Java, or OCaml. Success in this role requires both technical innovation and business acumen, as you'll be expected to help grow the company's formal verification and program analysis service offerings.