Trail of Bits

Artificial Intelligence

• Track engineering output — tool releases, research papers, conference talks, milestones — and make sure each gets coverage.
• Work through the existing backlog of shipped tools and research that never got written up publicly.
• Create case studies, briefs, blog drafts, and marketing assets that work for both technical and business audiences.
• Partner with Technical Editing on content pipelines, especially around report publications and blog production, and provide additional writing capacity when the team needs it.
• Own the content calendar across practices. Coordinate publishing schedules so coverage is steady and nothing falls through the cracks.
• Own social media across X, LinkedIn, and Bluesky. Maintain a consistent publishing cadence, engage with the community, and grow our audience.
• Manage Trail of Bits’ presence at industry events and relevant conferences.
• Plan and run multi-channel campaigns (social, email, webinars, conference activations) that drive pipeline.
• Improve upon existing baselines, track performance, and create a reporting rhythm so the team knows what’s working and where we should continue investing.
• Gather market intelligence through customer conversations, competitor monitoring, and community engagement that informs how we position our services.

Technical Marketing Manager – AppSec, AI/ML, R&E

Systems Engineer

• Build and deploy internal tools that solve real operational challenges across engineering, operations, and go-to-market teams.
• Design AI-powered workflows that enhance team productivity, knowledge management, and decision-making.
• Create automation systems that eliminate manual processes and unlock team efficiency.
• Integrate AI capabilities (like Claude) into existing workflows and communication platforms like Slack.
• Collaborate directly with the CEO and senior leadership to identify high-impact opportunities and iterate rapidly on solutions.
• Ship production-ready code that becomes part of Trail of Bits' operational infrastructure.

AI Systems Engineer

Security Engineer

• Conduct comprehensive low-level code security assessments across applications, examining vulnerabilities in system services, access control implementation, inter-process communication, and platform security controls while developing mitigation strategies.
• Design and implement custom security tools for automated vulnerability detection, focusing on both application-specific and general security testing needs to bridge the gap between vulnerability research and application security.
• Perform detailed architecture reviews and threat modeling of complex software systems and cloud environments, identifying potential security weaknesses in areas such as data flows, authentication mechanisms, and API security while providing remediation guidance.
• Work directly with industry-leading teams to review their application infrastructure and architecture, helping secure their environments through deep technical analysis and recommendations.
• Contribute to the advancement of application security, developing new methodologies and tools while staying up to date with the latest security developments in both traditional and emerging technology ecosystems.

Security Engineer, Application Security

• Conduct comprehensive application security assessments of agentic AI pipelines, tools, and frameworks for leading companies and labs. Examine vulnerabilities in model architectures, guardrails, and deployment infrastructure while developing mitigation strategies.
• Develop and share novel prompt injection techniques targeting agentic workflows, including indirect injection via tool outputs, multi-turn manipulation, and cross-agent exploitation. Produce actionable attack libraries and defensive countermeasures for client engagements.
• Conduct security assessments of client code bases using a combination of static analysis, dynamic testing, and manual code review, identifying vulnerabilities and developing mitigation strategies, with a focus on findings at the intersection of application security and Agentic AI security.
• Conduct threat modeling and risk assessments to proactively identify potential risks for clients and develop mitigation strategies for future prevention, with particular attention to prompt injection attack surfaces in agentic orchestration layers.
• Work with leading industry teams to review system code and architecture, and help assure their products through system analysis and modeling.
• Develop and contribute to AI regulatory frameworks, establishing assurance methods and auditing processes for mission-critical AI applications while ensuring alignment with emerging industry standards and safety requirements.

Technical Marketing Manager – AppSec, AI/ML, R&E

AI Systems Engineer

Security Engineer, Application Security

Senior Security Engineer