Engineering Director, Application Security - Trail of Bits

Who We Are

Founded in 2012 by three expert hackers with no investment capital, Trail of Bits is the premier place for security experts to boldly advance security and address technology’s newest and most challenging risks. We help secure some of the world's most targeted organizations and devices, combining novel research with practical solutions to reduce security risks from emerging technologies.

Role

You will lead Trail of Bits' Application Security practice: a team of 12 security engineers who perform code audits, vulnerability research, and secure design reviews for some of the most technically demanding clients in the industry.

This is a hands-on leadership role. You will personally review audit findings, guide technical approaches, and maintain the credibility to engage with sophisticated clients who expect their security partner to operate at their level. You will own the practice's financial performance, project staffing, and team development.

What You’ll Achieve

• Lead technical delivery: Own the quality and profitability of every engagement your team ships. Review findings, guide technical direction on complex audits, and step in when projects need senior expertise.
• Staff and grow the practice: Make project assignment decisions that balance engineer development, client needs, and profitability. Manage utilization, identify when to hire, and build the pipeline.
• Develop your engineers: Create space for your team to present at conferences, publish research, contribute to open source tools, and advance their careers.
• Set technical direction: Decide where the practice invests in tooling, methodology, and capability development.
• Integrate AI into the practice: Champion and model the use of AI tools across your team's workflows to amplify their effectiveness.

What You’ll Bring

• 10+ years in security, including significant time performing source code audits, not only penetration testing
• Recent, demonstrable hands-on security work (code review, vulnerability research, tool development) within the last 12 months
• Experience leading a team of 8+ engineers through client engagements with direct financial accountability
• Proficiency in at least 4 of: Rust, Go, Python, C/C++, Solidity, JavaScript/TypeScript
• Track record of managing project profitability, utilization, and staffing decisions in a consulting environment
• Experience building team members' careers and external visibility
• Proficiency with AI coding and analysis tools in your own work
• Active contributions to the security community

Benefits & Perks

• Competitive base salary complemented by performance-based bonuses
• Fully company-paid insurance packages (health, dental, vision, disability, life)
• 401(k) plan with a 5% match
• 20 days of paid vacation
• 4 months of parental leave
• $10,000 relocation assistance if moving to NYC
• $1,000 Work-from-Home stipend
• Annual $750 Learning & Development stipend