Product Security Engineer, Senior

The role

You will build mission-critical infrastructure to ensure application security, availability, and performance. You will lead security reviews, threat modeling, and vulnerability management for TRM products.

What you will do

• Lead application security reviews and threat modeling
• Develop automated testing and mature the Secure SDLC
• Own and perform application security vulnerability management
• Coordinate penetration testing engagements
• Support software engineers and product teams with security best practices
• Develop and maintain the bug bounty program
• Bootstrap platform security initiatives to protect TRM data
• Foster security champions and coordinate secure code training

Required qualifications

• Minimum 8 years of experience in Software Development and testing
• BS (or equivalent) in Computer Science, Computer Engineering, or related field
• Proficiency in Python, NodeJS, React
• Strong understanding of encryption, authentication, and authorization protocols
• Deep experience with common software flaws (e.g., OWASP and CWE)
• Experience with common security tooling for testing
• Professional experience with security solutions for cloud providers such as GCP and AWS
• Experience with modern secure software development lifecycles and threat modeling
• Experience conducting efficient and comprehensive code security reviews
• Experience triaging and remediating vulnerabilities in software packages or libraries
• Experience with Software Security tools such as Github advanced security or other SAST, DAST, and SCA tools
• Experience with Web application testing frameworks such as BurpSuite, OWASP ZAP, etc.

Nice to have

• Security certifications such as OSCP, CEH, GWAPT
• Familiarity with security frameworks (e.g., NIST SP 800-171 SSDF)

Benefits

• TRM coordinates and covers approved travel, lodging, and workspace
• Accommodations are available for legitimate caregiving, health, immigration, and similar constraints

Before you apply

• U.S. Citizenship Required
• You will be evaluated on applied AI fluency during the interview process
• Most interview processes include a case study, an AI skills assessment, and a Leadership Principles interview
• Use of AI tools of any kind during interviews is not permitted without prior approval

About the company

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. The company is a Series C company headquartered in San Francisco.