Product Security Engineer
TRM Labs · Remote · United States ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior level (8+ years)
- Python, NodeJS, React
- GCP and AWS experience
- Quarterly in-person trips
- Distributed-first company
Join the Security team at TRM Labs to protect infrastructure and code used by agencies investigating illicit activity. You will design technical strategies, implement best practices, and collaborate with engineering leadership to ensure product safety. The team values mutual respect, transparency, and efficient risk mitigation aligned with business goals.
What you'll do
- Lead application security reviews, threat modeling, and secure code analysis
- Develop automated testing and mature the Secure SDLC processes
- Manage application security vulnerabilities and coordinate penetration tests
- Support engineering teams by defining and sharing security best practices
- Maintain the bug bounty program and bootstrap platform security initiatives
- Foster a security culture by training champions and conducting code reviews
What you'll need
- Minimum 8 years of experience in software development and testing
- BS in Computer Science, Engineering, or equivalent practical experience
- Proficiency in Python, NodeJS, and React development
- Strong knowledge of encryption, authentication, and authorization protocols
- Deep understanding of OWASP, CWE, and common software flaws
- Experience with cloud security on GCP and AWS platforms
- Proficiency with SAST, DAST, SCA tools, and web testing frameworks
- Background in agile software development environments
- Experience with red teaming or application penetration testing
Nice to have
- Security certifications such as OSCP, CEH, or GWAPT
- Familiarity with security frameworks like NIST SP 800-171 SSDF
Stack
- Python
- NodeJS
- React
- GCP
- AWS
- BurpSuite
- OWASP ZAP
- Github Advanced Security
How you'll work
- Distributed-first company with global hubs
- Time zones: EST, PST, or CET
- In-person R&D work weeks 1–2 times per quarter
- Travel and lodging covered by the company
- Fast-paced environment with high ownership expectations
What you get
- Approved travel, lodging, and workspace costs covered
- Accommodations for caregiving, health, or immigration needs
- Opportunity to work on national security and crime disruption
Hiring process
- Recruiter introductory call
- Hiring manager deep dive interview
- First round focused on critical skills
- Final round with hands-on case study panel
- Reference checks with former colleagues
- Offer presentation and onboarding