Product Security Engineer
TRM Labs · United States
About the role
An application security engineer on TRM Labs' Security team, responsible for keeping the company's products secure as they are built and shipped. The engineer leads security reviews and threat modelling, from secure code review to architecture and testing, builds automated testing into a maturing secure development lifecycle, owns AppSec vulnerability management, coordinates penetration tests, runs the bug bounty program, starts platform security projects that protect TRM data, and grows security champions and secure coding training across engineering.
TRM asks for at least eight years in software development and testing, Python, Node and React, strong knowledge of OWASP and CWE flaws, SAST, DAST and SCA tools, Burp or ZAP, cloud security on GCP or AWS, and pen testing or red team experience. Remote in the US, with in-person work weeks each quarter.