Teams at Trail of Bits

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Conduct red-team assessments of formally verified systems, evaluating proofs, specifications, threat models, and trusted computing bases. Build AI-driven vulnerability discovery, triage, and exploit-generation tooling; identify and demonstrate exploitable weaknesses in software and infrastructure. Produce rigorous security reports, publish methodologies, collaborate with domain experts and third parties, and deliver engagements on fixed schedules.