Trail of Bits

Project Manager

• End-to-end project delivery. Run multiple concurrent client engagements through the project lifecycle. Manage scope, timeline, and budget so engineers stay focused on the technical work and clients stay informed.
• Client relationship ownership. Serve as the primary point of contact across your portfolio. Handle status updates, working sessions, escalations, and the small check-ins between projects that keep accounts warm.
• Account growth. Spot opportunities for clients to do more with Trail of Bits. Move clients from one-off reviews into retainers, follow up on options in existing SOWs, and bring sales in when a real expansion is on the table.
• Sales partnership. Run the returning-client sales cycle alongside our sales team. When a client you've worked with comes back, the handoff stays invisible to them.
• Internal coordination. Work closely with Engineering Directors and engineers to staff projects, manage scheduling in Float, track work in Asana, and keep deal and account context current in HubSpot.
• Cross-functional support. Show up for the team beyond your direct projects. That includes helping marketing drive client attendance at industry events, contributing to internal process improvements, and jumping in where the team needs you.

Project Manager, Client Services

Security Engineer

• Design and implement security-focused software tools and frameworks.
• Contribute to open-source security projects and develop internal tools.
• Analyze complex security challenges and develop practical solutions.
• Understand security implications across the stack.
• Implement secure CI/CD pipelines and integration with GitHub Actions.
• Contribute to AI/ML security research and tooling.
• Evaluate and improve the security of existing software through code review and enhancement.
• Communicate technical concepts effectively and write for the broader security community.
• Lead major feature development and break down high-level objectives into manageable tasks.

Security Engineer – Research & Engineering

• Set the technical vision for your area of expertise.
• Design and guide the execution of complex security research and engineering efforts that advance Trail of Bits' capabilities.
• Engage with potential clients and drive the sales process independently.
• Mentor 3–4 Senior Engineers, helping them build their professional networks and skillsets.
• Lead projects end-to-end and ensure delivery.
• Lead the company's publications and marketing efforts in your domain.
• Identify team organization and operational problems and help fill them.
• Architect and oversee the development of security-focused software tools and frameworks.
• Guide the team's approach to AI/ML security research and tooling.

Principal Security Engineer – Research & Engineering

Artificial Intelligence

• Track engineering output — tool releases, research papers, conference talks, milestones — and make sure each gets coverage.
• Work through the existing backlog of shipped tools and research that never got written up publicly.
• Create case studies, briefs, blog drafts, and marketing assets that work for both technical and business audiences.
• Partner with Technical Editing on content pipelines, especially around report publications and blog production, and provide additional writing capacity when the team needs it.
• Own the content calendar across practices. Coordinate publishing schedules so coverage is steady and nothing falls through the cracks.
• Own social media across X, LinkedIn, and Bluesky. Maintain a consistent publishing cadence, engage with the community, and grow our audience.
• Manage Trail of Bits’ presence at industry events and relevant conferences.
• Plan and run multi-channel campaigns (social, email, webinars, conference activations) that drive pipeline.
• Improve upon existing baselines, track performance, and create a reporting rhythm so the team knows what’s working and where we should continue investing.
• Gather market intelligence through customer conversations, competitor monitoring, and community engagement that informs how we position our services.

Technical Marketing Manager – AppSec, AI/ML, R&E

Systems Engineer

• Build and deploy internal tools that solve real operational challenges across engineering, operations, and go-to-market teams.
• Design AI-powered workflows that enhance team productivity, knowledge management, and decision-making.
• Create automation systems that eliminate manual processes and unlock team efficiency.
• Integrate AI capabilities (like Claude) into existing workflows and communication platforms like Slack.
• Collaborate directly with the CEO and senior leadership to identify high-impact opportunities and iterate rapidly on solutions.
• Ship production-ready code that becomes part of Trail of Bits' operational infrastructure.

AI Systems Engineer

• Conduct comprehensive low-level code security assessments across applications, examining vulnerabilities in system services, access control implementation, inter-process communication, and platform security controls while developing mitigation strategies.
• Design and implement custom security tools for automated vulnerability detection, focusing on both application-specific and general security testing needs to bridge the gap between vulnerability research and application security.
• Perform detailed architecture reviews and threat modeling of complex software systems and cloud environments, identifying potential security weaknesses in areas such as data flows, authentication mechanisms, and API security while providing remediation guidance.
• Work directly with industry-leading teams to review their application infrastructure and architecture, helping secure their environments through deep technical analysis and recommendations.
• Contribute to the advancement of application security, developing new methodologies and tools while staying up to date with the latest security developments in both traditional and emerging technology ecosystems.

Security Engineer, Application Security

• Conduct comprehensive application security assessments of agentic AI pipelines, tools, and frameworks for leading companies and labs. Examine vulnerabilities in model architectures, guardrails, and deployment infrastructure while developing mitigation strategies.
• Develop and share novel prompt injection techniques targeting agentic workflows, including indirect injection via tool outputs, multi-turn manipulation, and cross-agent exploitation. Produce actionable attack libraries and defensive countermeasures for client engagements.
• Conduct security assessments of client code bases using a combination of static analysis, dynamic testing, and manual code review, identifying vulnerabilities and developing mitigation strategies, with a focus on findings at the intersection of application security and Agentic AI security.
• Conduct threat modeling and risk assessments to proactively identify potential risks for clients and develop mitigation strategies for future prevention, with particular attention to prompt injection attack surfaces in agentic orchestration layers.
• Work with leading industry teams to review system code and architecture, and help assure their products through system analysis and modeling.
• Develop and contribute to AI regulatory frameworks, establishing assurance methods and auditing processes for mission-critical AI applications while ensuring alignment with emerging industry standards and safety requirements.