Address
Form of workAbout Trail of Bits
Trail of Bits helps secure the world's most targeted organizations and products. We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code.
As a cybersecurity research and consulting firm, our team has worked on some of the most innovative software projects millions of people use worldwide. We help the best companies in the world - Epic Games, Google, Microsoft, Zoom, and others - with their most complex security challenges by designing and building new technology, researching new techniques, and reviewing the security of the latest available products before they hit the market.
Our team considers developing and sharing our knowledge as a natural part of doing business. We push to publish every tool or project so the public - not just our clients - benefit from our expertise and innovations. It's a practice that's earned us industry accolades and helped contribute to our double-digit bottom-line growth.
Role
As a Senior IT Engineer, you will play a pivotal role in ensuring the reliability and security of IT services for both Trail of Bits employees and clients. This position necessitates a commitment to preventing rework through meticulous deployment practices and a thorough understanding of foundational server deployment principles.
Your responsibilities will include close collaboration with senior IT and DevOps engineers to actively contribute to developing, implementing, and maintaining critical infrastructure and services. We seek a candidate who can quickly adapt to new security concepts, business requirements, and associated risks.
The successful individual will work seamlessly with our Operations and Security Engineering Team to identify acceptable risks, those requiring mitigation, and the methods and rationale behind these decisions. This role requires a proactive approach to security and a dedication to fostering a robust and secure IT environment for both internal stakeholders and external clients.
What You'll Achieve:
What You'll Bring:
The base salary for this full-time position ranges from $120,000 to $130,000, excluding benefits and potential bonuses. Various factors influence our salary ranges, including the specific role, level of seniority, geographic location, and the nature of the employment contract. An individual's specific work location, unique skills, experience, and relevant educational background will determine the final offer within this range. The presented salary range encompasses the starting salaries for all U.S. locations. For a precise salary estimate tailored to your preferred location, please discuss it with your recruiter during the hiring process.
Trail of Bits, Inc. participates in E-Verify, the US federal electronic employment eligibility verification program. Learn more .
Company Perks
Dedication to diversity, equity & inclusion
Trail of Bits is committed to creating and maintaining a diverse and inclusive workplace where our employees can thrive and be themselves! We welcome all persons into our community. We embrace the diversity of gender, gender identity or expression, race, color, religious creed, national origin, ancestry, age, physical and mental disabilities, medical condition, genetic characteristic, sexual orientation, marital status, family care or medical leave status, military or veteran status, or perceived membership in any of these groups.
Trail of Bits helps secure the world's most targeted organizations and products. We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code.
As a cybersecurity research and consulting firm, our team has worked on some of the most innovative software projects millions of people use worldwide. We help the best companies in the world - Epic Games, Google, Microsoft, Zoom, and others - with their most complex security challenges by designing and building new technology, researching new techniques, and reviewing the security of the latest available products before they hit the market.
Our team considers developing and sharing our knowledge as a natural part of doing business. We push to publish every tool or project so the public - not just our clients - benefit from our expertise and innovations. It's a practice that's earned us industry accolades and helped contribute to our double-digit bottom-line growth.
Role
As a Senior IT Engineer, you will play a pivotal role in ensuring the reliability and security of IT services for both Trail of Bits employees and clients. This position necessitates a commitment to preventing rework through meticulous deployment practices and a thorough understanding of foundational server deployment principles.
Your responsibilities will include close collaboration with senior IT and DevOps engineers to actively contribute to developing, implementing, and maintaining critical infrastructure and services. We seek a candidate who can quickly adapt to new security concepts, business requirements, and associated risks.
The successful individual will work seamlessly with our Operations and Security Engineering Team to identify acceptable risks, those requiring mitigation, and the methods and rationale behind these decisions. This role requires a proactive approach to security and a dedication to fostering a robust and secure IT environment for both internal stakeholders and external clients.
What You'll Achieve:
- Collaborate in developing comprehensive security policies, requirements, and guidelines to address company risk.
- Ensure alignment with security compliance standards, including security awareness, activity-specific training, SOC 2, CMMC, and compliance related to client audits.
- Respond to and manage security incidents and events impacting our corporate systems.
- Execute vulnerability scans, conduct tests, and apply patches and updates to fortify our security infrastructure.
- Support our Senior Corporate Security Engineer in implementing security initiatives, such as zero-trust authentication & authorization and device health, while crafting policies and scripts to reinforce security for company-owned devices.
- Create and optimize tooling processes for streamlined end-user asset management, provisioning, and tracking.
- Identify and suggest enhancements to systems and processes, advocating for integrations, automation, and configuration adjustments.
- Provide technical support to end-users and maintain our workspace tools, including Google Workspace, GitHub, Slack, and Jamf.
- Stay abreast of the latest security technologies and trends, evaluating and recommending new tools and techniques to fortify our security landscape.
- Other tasks and duties as assigned.
What You'll Bring:
- Experience providing IT Security support in a technical environment, with exposure to the security industry.
- Experience working with endpoint management, such as Jamf, in large device environments with open-source tools or MDM systems.
- Hands-on experience with Endpoint Detection and Response tools such as Crowdstrike, including implementation, management, and response to security incidents.
- Proficiency in at least one programming or scripting language, such as Python, Bash, or Powershell.
- Ability to deploy and manage cloud service applications company-wide.
- Proficiency in various operating systems, applications, and network protocols such as Slack, Google Workspace, GitHub, and Jamf; experienced and knowledgeable in authentication and access control using OAuth 2.0, FIDO/U2F, TOTP/HOTP, and other multi-factor authentication.
- Passion for IT security, demonstrated by continuous learning, engagement with emerging security tools, and a proactive approach to cybersecurity challenges.
The base salary for this full-time position ranges from $120,000 to $130,000, excluding benefits and potential bonuses. Various factors influence our salary ranges, including the specific role, level of seniority, geographic location, and the nature of the employment contract. An individual's specific work location, unique skills, experience, and relevant educational background will determine the final offer within this range. The presented salary range encompasses the starting salaries for all U.S. locations. For a precise salary estimate tailored to your preferred location, please discuss it with your recruiter during the hiring process.
Trail of Bits, Inc. participates in E-Verify, the US federal electronic employment eligibility verification program. Learn more .
Company Perks
- Before, during and after COVID-19, our workforce works flexibly. Many employees choose to work from home around the globe. As long as you deliver against your goals, we encourage you to harness your personal working style to let you work best.
- Liberal expense policy for acquiring the equipment and software that help you do your job. If we need hardware to work effectively, we buy it.
- We offer exceptional and tailored technical, leadership and organizational training for our team members. Everyone is encouraged to identify additional opportunities for personal professional growth with working at Trail of Bits.
- We routinely highlight the amazing work our employees do via our blog, product offerings, and conference talks. We celebrate you!
- We're at the forefront of a number of markets and have the internal expertise and the ambition to capitalize on those opportunities. Our employees see their work in use and valued by many others.
- Multiple generous health, vision, and dental insurance plans.
- Ancillary benefits including life and disability insurance.
- Retirement plan with 5% company matching.
- 4 months paid parental leave.
- Moving expenses to NY: $5,000 one-time.
- Charitable donations matching up to $2,000.
- One time $1,000 at home office expense stipend.
- $500/year personal learning & development budget.
- Executive coaching for managers & above.
- Bonuses for recruiting, public speaking, tool releases, blog posts, academic posters, proposals, and whitepapers, and end-of-year bonuses based on company, team, and personal performance.
- 20 days of PTO per year for vacation, sick, and personal time off.
- 15 company holidays per year.
- Carbon offsets for your personal and corporate carbon emissions through Project Wren.
Dedication to diversity, equity & inclusion
Trail of Bits is committed to creating and maintaining a diverse and inclusive workplace where our employees can thrive and be themselves! We welcome all persons into our community. We embrace the diversity of gender, gender identity or expression, race, color, religious creed, national origin, ancestry, age, physical and mental disabilities, medical condition, genetic characteristic, sexual orientation, marital status, family care or medical leave status, military or veteran status, or perceived membership in any of these groups.
