Remote Security Engineer II

Summary

Trail of Bits is seeking a Security Engineer II, Blockchain to join their team. The role involves reviewing blockchain code for security vulnerabilities, providing strategic advice to clients, building custom tools, and contributing to research and innovation in the field of blockchain security. The position offers competitive salary, fully company-paid insurance packages, a 401(k) plan with a 5% match, 20 days of paid vacation, 4 months of parental leave, relocation assistance for those moving to NYC, a working-from-home stipend, learning and development opportunities, company-sponsored team celebrations, philanthropic contribution matching, and participation in Project Wren.

Requirements

• Extensive experience as a blockchain security engineer with a deep understanding of Solidity security and the Ethereum Virtual Machine (EVM), including familiarity with Ethereum Yellow Paper
• Proficiency in Solidity, identifying and reporting vulnerabilities, including but not limited to reentrancy, integer overflows/underflows, front-running, and other common Solidity-specific issues
• Altchains and off-chain experience: Experience with at least one alternative blockchain platform such as Cosmos, Starknet, Substrate, and Solana, and a background in reviewing off-chain components and nodes (in Go or Rust), with a particular emphasis on L1/L2, consensus, VM, and network components
• Automated testing proficiency: Experience working with fuzzers, CodeQL, or Semgrep, including building harness, writing linting rules, and applying the tools on large codebases
• Excellent written and verbal communication skills, with a strong emphasis on engaging with customers, writing technical blog posts, and delivering presentations to the technical community

Responsibilities

• Review blockchain applications for security vulnerabilities using both manual analysis and automated tools
• Provide strategic advice to clients, helping them build more robust software in the long term, and improve their project’s maturity
• Build custom tools like Slither, Echidna, and Medusa for blockchain security

Benefits

• Competitive salary complemented by performance-based bonuses
• Fully company-paid insurance packages, including health, dental, vision, disability, and life
• A solid 401(k) plan with a 5% match of your base salary
• 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations
• 4 months of parental leave to cherish the arrival of new family members
• Our team is global and remote-first. However, if you are interested in moving to NYC, we offer $5,000 in relocation assistance to support your transition
• $1,000 Working-from-Home stipend to create a comfortable and productive home office
• Annual $750 Learning & Development stipend for continuous personal and professional growth
• Company-sponsored all-team celebrations, including travel and accommodation, to foster community and recognize achievements
• Philanthropic contribution matching up to $2,000 annually
• Opportunity to participate in Project Wren, promoting environmental responsibility and carbon footprint offset