Senior Developer Relations Engineer – Security Advocate

This is a fully remote position, open to applicants in United States.

📋 Description

• Cultivate and expand existing relationships while establishing new connections within the security practitioner, researcher, maintainer, and open-source communities.

• Participate in and present at relevant cybersecurity conferences and meetups.

• Reinvigorate and support successful community meetups.

• Facilitate technical office hours to connect open-source maintainers with engineers from Trail of Bits.

• Assist in ensuring contributions are integrated upstream and maintain relationships once engagements conclude.

• Transform research and releases into advisories, co-authored articles, reusable guidance, workshops, and hands-on sessions.

• Publish in-depth analyses, tutorials, and technical documents under your own name.

• Identify speaking engagements and support engineers in submitting, preparing, and delivering conference presentations.

• Evaluate Trail of Bits work against unfamiliar code and provide constructive feedback to research and engineering teams.

• Create runnable examples and workflow integrations; contribute to skills and plugins.

• Enhance project onboarding, documentation, and initial user experiences.

• Attract external contributors and promote ongoing contributions.

• Relay practitioner needs, research gaps, and emerging ecosystem trends back to the firm.

• Establish targets with the manager during the first quarter and review them quarterly.

• Monitor ecosystem outcomes such as contributors, upstream fixes, accepted presentations, cited writings, and practitioner advocacy.

• Transfer commercially relevant opportunities and coordinate with the appropriate teams.

⛳️ Requirements

• Experience delivering software that is actively used, such as tools, libraries, integrations, skills, or agents.

• Proficiency in reading unfamiliar code, executing analyzers, and managing merged pull requests.

• Extensive hands-on security expertise, generally seven or more years.

• Published research, CVEs, or advisories can contribute to security experience.

• Practical experience with agentic tools, including skills, agents, MCP servers, harnesses, and evaluations.

• A public portfolio showcasing work including presentations, articles, upstream contributions, research, or documentation.

• Established credibility within security and open-source communities.

• Strong writing and speaking skills tailored for a discerning technical audience.

• Ability to establish and justify priorities amidst ambiguity.

• Willingness to travel approximately one quarter of the year.

• Nice to have: Experience in maintaining open-source projects or making significant contributions.

• Nice to have: Expertise in application security, blockchain and cryptography, AI/ML security, or low-level systems research.

• Nice to have: Experience managing or programming a community venue at a significant scale.

• Nice to have: Contributions to developer documentation that accompany code releases.

• Nice to have: Engagement with open-source foundations, grant programs, or initiatives focused on maintainers.

🏝️ Benefits

• Competitive salary along with performance-based bonuses.

• Comprehensive health, dental, vision, disability, and life insurance fully covered by the company.

• 401(k) plan featuring a 5% match of base salary.

• 20 days of paid vacation with the flexibility for additional time, in compliance with jurisdictional regulations.

• 4 months of parental leave.

• $10,000 relocation assistance for moving to NYC.

• $1,000 stipend for working from home.

• Annual $750 Learning & Development stipend.

• Company-sponsored all-team celebrations, including travel and accommodations.

• Matching for philanthropic contributions up to $2,000 annually.

• A remote-first culture that emphasizes autonomy and trust.