Who We Are

Founded in 2012 by 3 expert hackers with no investment capital, Trail of Bits is the premier place for security experts to boldly advance security and address technology’s newest and most challenging risks. It has helped secure some of the world's most targeted organizations and devices. Our combination of novel research with practical solutions reduces the security risks that our clients face from emerging technologies. Our work helps drive the security industry and the public understanding of the technology underlying our world.

Cybersecurity preparedness is a moving target. Companies like ours are the tip of the spear in the fight against attackers. Our research-based and custom-engineering approach ensures that our client’s capabilities are at the forefront of what’s available. For companies and technologies that live and die by their security, a proactive, tailored approach is required to keep one step ahead of attackers.

Democratizing security information is essential. As part of our business, we provide ongoing informational support through blogs, whitepapers, newsletters, meetups, and open-source tools. The more the community understands security, the more they’ll understand why a company like ours is so unique and valuable.

Role

Trail of Bits seeks a Security Engineer II, Blockchain to join our growing team that is shaping the future of blockchain security. We review blockchain code and smart contracts for security vulnerabilities. We provide strategic advice to our customers, helping them to build more robust software in the long term, and to improve their project’s maturity.

We build custom tools like Slither, Echidna, and Medusa, among the first blockchain security tools used in practice on real code. We provide our engineers with ample opportunity to build and experiment with new tools between project engagements. Join us to make a career-defining contribution.You will be at the forefront of blockchain security research. You will review blockchain applications for security vulnerabilities using both manual analysis and automated tools. You will leverage your Solidity experience to review blockchain off-chain code or infrastructure, and smart contracts written in such languages.

Other practitioners at Trail of Bits and within the industry will come to rely on your work, and you will make a name for yourself in a nascent discipline.

What You’ll Achieve

Code Review: Work directly with leading teams in the blockchain industry to review their code and help secure their products.
Problem Solving: Design and implement solutions for difficult engineering and research problems. Provide expert guidance and innovative strategies to address and mitigate security vulnerabilities in client’s blockchain implementations.
Tool Maintenance and Improvement: Collaborate with teammates to maintain and continually improve our existing blockchain security tools using modern software engineering practices. Contribute to developing and enhancing open-source tools that Trail of Bits has developed, ensuring they remain cutting-edge and effective in the evolving blockchain landscape.
Research and Innovation: Push the boundaries of the industry through research and tooling, contributing to advancing blockchain security practices. Identify emerging threats and develop proactive solutions to address them, position Trail of Bits as a leader in blockchain security.

What You’ll Bring

Blockchain Security Engineering Experience: Extensive experience as a blockchain security engineer, with a deep understanding of Solidity security and the Ethereum Virtual Machine (EVM), including familiarity with Ethereum Yellow Paper.
Proficiency in Solidity: Multiple years working in Solidity, identifying and reporting vulnerabilities, including but not limited to reentrancy, integer overflows/underflows, front-running, and other common Solidity-specific issues.
Altchains and off-chain Experience: Altchains and off-chain Experience: Experience with at least one alternative blockchain platform such as Cosmos, Starknet, Substrate, and Solana, and a background in reviewing off-chain components and nodes (in Go or Rust), with a particular emphasis on L1/L2, consensus, VM, and network components.
Automated Testing Proficiency. Experience working with fuzzers, CodeQL, or Semgrep, including building harness, writing linting rules, and applying the tools on large codebases
Technical Communication Skills: Excellent written and verbal communication skills, with a strong emphasis on engaging with customers, writing technical blog posts, and delivering presentations to the technical community.

Reporting Manager: Engineering Director, Blockchain

Trail of Bits, Inc. participates in E-Verify, the US federal electronic employment eligibility verification program. Learn more.

Benefits, Perks & Wellness

Trail of Bits is our people, not a place. With over 100+ employees working from every time zone across the globe, our remote-first culture is built on autonomy and trust (and backed by smile-worthy benefits) for full-time employees:

Empowered Living:

Competitive salary complemented by performance-based bonuses.
Fully company-paid insurance packages, including health, dental, vision, disability, and life.
A solid 401(k) plan with a 5% match of your base salary.
20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations.

Nurturing New Beginnings:

4 months of parental leave to cherish the arrival of new family members.
Our team is global and remote-first. However, if you are interested in moving to NYC, we offer $5,000 in relocation assistance to support your transition.

Work & Life Enrichment:

$1,000 Working-from-Home stipend to create a comfortable and productive home office.
Annual $750 Learning & Development stipend for continuous personal and professional growth.
Company-sponsored all-team celebrations, including travel and accommodation, to foster community and recognize achievements.

Community Impact:

Philanthropic contribution matching up to $2,000 annually.
Opportunity to participate in Project Wren, promoting environmental responsibility and carbon footprint offset.

Dedication to Diversity, Equity, Inclusion & Belonging (DEIB)

Trail of Bits is a community of innovators, risk-takers, and trailblazers who celebrate individual differences and recognize that unique perspectives make us stronger, smarter, and more successful. We actively seeks applicants who can bring a variety of experiences, perspectives, and backgrounds to the team. We provide equal employment opportunities to all employees and applicants for employment without regard to race, color, ancestry, national origin, gender, sex, pregnancy, pregnancy-related condition, sexual orientation, marital status, religion, age, disability, qualified handicap, gender identity, results of genetic testing, military status, veteran status, or any other characteristic protected by applicable law. Our team values diversity in experience and backgrounds—we do our best work when we create space for different voices and perspectives. Whatever unique experiences or skill sets you bring, we look forward to learning from each other.

Apply for this Job

* Required

First Name *

Last Name *

Email *

Phone

Resume/CV

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

Cover Letter

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

LinkedIn Profile

Website/Github

If hired, what country will you be working from? *

We are not accepting applications from candidates living in China, Cuba, Iran, Lebanon, Libya, North Korea, Russia, Somalia, Sudan or Syria.

If you are living in the United States, which state are you located in? (If you are outside of the United States, please type N/A) *

If you will be working from the US or Canada, do you now require or will you require in the future visa sponsorship to continue working in such a location? *

Have you reviewed the salary range? *

Please provide an overview of your participation in the blockchain security community. Include details about any conferences you have attended or spoken at, training sessions you have conducted or participated in, and any talks or presentations you have given. *

How many years of experience do you have in blockchain security focusing on vulnerabilities in Solidity smart contracts? *

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Trail of Bits’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Are you Hispanic/Latino?

Please identify your race

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Disability Status

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Enter the verification code sent to to confirm you are not a robot, then submit your application.

Security Code *

This application was flagged as potential bot traffic. To resubmit your application, turn off any VPNs, clear the browser's cache and cookies, or try another browser. If you still can't submit it, contact our support team through the help center.