Engineering Director, Application Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the Application Security practice at Trail of Bits, leading a team of 12 security engineers.

• Take responsibility for the quality and profitability of all engagements delivered by the team.

• Evaluate audit findings, steer technical direction on intricate audits, and offer senior-level expertise as required.

• Foster and maintain direct relationships with key clients.

• Make informed decisions regarding project assignments, balancing engineer development, client requirements, and profitability.

• Manage resource utilization, identify hiring needs, and develop the practice pipeline through intern programs and recruitment efforts.

• Own the practice's profit and loss statement.

• Cultivate engineers by facilitating opportunities for conference presentations, research publications, open-source contributions, and career growth.

• Establish the technical direction for tools, methodologies, and capability enhancements.

• Ensure the practice's approach remains aligned with the evolving threat landscape and client needs.

• Incorporate AI tools into auditing, reporting, and research processes.

• Conduct and guide static analysis, manual code review, fuzzing, and protocol-level vulnerability research across various programming languages.

⛳️ Requirements

• A minimum of 10 years in the security field, with considerable experience in source code audits beyond just penetration testing.

• Recent, demonstrable hands-on security work within the past 12 months, including code review, vulnerability research, or tool development.

• Proven experience in leading a team of 8 or more engineers during client engagements, with direct financial accountability.

• Proficiency in at least four of the following languages: Rust, Go, Python, C/C++, Solidity, and JavaScript/TypeScript.

• A history of managing project profitability, utilization, and staffing choices within a consulting environment.

• Experience in advancing team members' careers and enhancing their external visibility through conference presentations, publications, or open-source contributions.

• Skillful use of AI coding and analysis tools in your work.

• Active engagement in the security community through research, tools, advisories, or publications.

• Eligibility for employment verification through E-Verify is required.

🏝️ Benefits

• Competitive salary supplemented by performance-based bonuses.

• Comprehensive company-paid insurance packages, which include health, dental, vision, disability, and life coverage.

• A robust 401(k) plan featuring a 5% match of your base salary.

• 20 days of paid vacation, with the flexibility for additional days in accordance with jurisdictional regulations.

• 4 months of parental leave.

• $10,000 in relocation assistance for those moving to NYC.

• $1,000 stipend for working from home expenses.

• Annual Learning & Development stipend of $750.

• Company-sponsored all-team celebrations, including travel and accommodations.

• Philanthropic contribution matching up to $2,000 annually.