Conduct red-team assessments of formally verified systems, evaluating proofs, specifications, threat models, and trusted computing bases. Build AI-driven vulnerability discovery, triage, and exploit-generation tooling; identify and demonstrate exploitable weaknesses in software and infrastructure. Produce rigorous security reports, publish methodologies, collaborate with domain experts and third parties, and deliver engagements on fixed schedules.

Leads a 12-person application security practice conducting code audits, vulnerability research, and secure design reviews. Oversees technical delivery, client relationships, project staffing, utilization, profitability, recruiting, and team development. Provides hands-on technical direction across source-code security work, determines investments in tooling and methodologies, and integrates AI-assisted auditing and research into team workflows. The role also owns practice P&L and supports engineers’ conference, publication, and open-source contributions.

Own developer-facing outreach for Trail of Bits: grow community relationships, support and onboard maintainers, convert research into usable tools and docs, publish deep technical content, run workshops and conference presence, and attract upstream contributions while routing practitioner feedback into product and research priorities.