Trail of Bits

Blockchain Security Analyst

3+ months agoRemote
About Trail of Bits
Trail of Bits helps secure the world’s most targeted organizations and products. We combine high-end security research with a real-world attacker mentality to reduce risk and fortify code.

As a cybersecurity research and consulting firm, we serve clients in the defense, tech, finance, and blockchain industries. We help with their most difficult security challenges by designing and building new technology, researching new techniques to advance the state of practice, and reviewing the security of the latest available technology products before they hit the market.

Our team consumes, produces, and presents research as a natural part of doing business. When we make new discoveries or developments, we strive to share our knowledge and release our tools as open-source. It’s a practice that’s earned us industry accolades and helped contribute to our double-digit bottom line growth.

Role
Our growing team is directing the future of blockchain security. We review blockchain code and smart contracts for security vulnerabilities. Between engagements, we build custom tools like Manticore, Ethersplay, Slither, and Echidna to aid our process. Think of all of the security tools for x86 that you would have liked to have built yourself, but mature versions already existed. Few of those tools have been built yet for blockchain architectures. Join us to make a career-defining contribution.

You will be at the forefront of blockchain security research. You will review smart contracts, blockchain infrastructure code, and decentralized applications for security vulnerabilities using a combination of manual static analysis and our tool suite. In your time between engagements, you will help improve our existing tooling and create new tools and analytics. Other practitioners will come to rely on your work. You will make a name for yourself in this nascent discipline.

Responsibilities

  • Work directly with the leading blockchain industry teams to review their code and help secure their products
  • Design and implement solutions to difficult engineering and research problems
  • Collaborate with teammates to maintain and continually improve our existing blockchain security tools using modern software engineering practices
  • Develop new blockchain security tools

Requirements

  • (Required)
  • 2+ years of experience in pure blockchain engineering and 1 year of experience in solidity security analysis.
  • The ideal candidate has multiple years in traditional security, before working in the blockchain space.
  • The position has no location restriction, but does require some overlap with EST working hours.
  • Solid understanding of the Ethereum Virtual Machine and Yellow Paper
  • Fluency in Solidity development and deployment of smart contracts.
  • High level understanding of common cryptographic vulnerabilities
  • Experience with library and API design
  • Strong debugging skills and/or experience with reverse engineering
  • (Nice to have)
  • Experience with Python, JavaScript, and TypeScript.
  • Proficiency with Linux and Git
  • Great written and spoken communication skills. We highly encourage all engineers to get regular face-time with customers, to write company blog posts about their accomplishments, and to deliver presentations to the technical community.

Company Perks

  • Before, during and after COVID-19, our workforce works flexibly. Many employees choose to work from home around the globe. As long as you deliver against your goals, we encourage you to harness your personal working style to let you work best.
  • Liberal expense policy for acquiring the equipment and software that help you do your job. If we need hardware to work effectively, we buy it. 
  • We offer exceptional and tailored technical, leadership and organizational training for our team members. Everyone is encouraged to identify additional opportunities for personal professional growth with working at Trail of Bits.
  • We routinely highlight the amazing work our employees do via our blog, product offerings, and conference talks. We celebrate you!
  • We're at the forefront of a number of markets and have the internal expertise and the ambition to capitalize on those opportunities. Our employees see their work in use and valued by many others.

Benefits for Eligible US Employees

  • Multiple generous health, vision, and dental insurance plans including no-monthly-premium options supporting individuals and families through JustWorks
  • Ancillary benefits including life and disability insurance, pre-tax commuter benefits, free Citi Bike membership, access to a HealthAdvocate, a healthcare Flexible Spending Account (FSA), and a free One Medical membership
  • 3-4 months paid parental leave
  • 401k with 5% company matching through Betterment
  • Moving expenses: $5k one-time
  • Charitable donation matching up to $2,000
  • Bonuses for recruiting, public speaking, tool releases, blog posts, academic posters, proposals, and whitepapers, and end-of-year bonuses based on company, team, and personal performance
  • 20 days of Paid Time Off (PTO) per year
  • 14 company holidays per year
  • Carbon offsets for your personal and corporate carbon emissions through Project Wren
  • Personal information privacy protection service subscription through DeleteMe

Benefits for Eligible Canadian Employees

  • Premium health, vision, and dental insurance plans
  • Life/AD&D Insurance options, as well as short- and long-term disability insurance plans
  • RRSP plan with 5% company matching
  • Charitable donation matching up to USD $2000
  • Bonuses for recruiting, public speaking, tool releases, blog posts, academic posters, proposals, and whitepapers, and end-of-year bonuses based on company, team, and personal performance
  • 10 days of Paid Time Off (PTO) and 10 days of sick time per year
  • 14 company holidays including provincial statutory holidays and select US holidays per year
  • Carbon offsets for your personal and corporate carbon emissions through Project Wren
  • Personal information privacy protection service subscription through DeleteMe

Dedication to diversity, equity & inclusion
Trail of Bits is committed to creating and maintaining a diverse and inclusive workplace where our employees can thrive and be themselves! We welcome all persons into our community. We embrace the diversity of gender, gender identity or expression, race, color, religious creed, national origin, ancestry, age, physical and mental disabilities, medical condition, genetic characteristic, sexual orientation, marital status, family care or medical leave status, military or veteran status, or perceived membership in any of these groups.