Senior Application Security Engineer

@ TRM Labs

About TRM Labs

TRM Labs is a blockchain intelligence company committed to fighting crime and creating a safer world. Leveraging blockchain data, threat intelligence, and advanced analytics, our products empower governments, financial institutions, and crypto businesses to combat illicit activity and global security threats.

Role Overview: Senior Application Security Engineer

In this role, you will lead application security reviews and threat modeling, develop automated testing frameworks, and manage vulnerability assessments. You will design technical strategy, establish company-wide best practices, and work closely with engineering teams to ensure high levels of security for TRM products.

• Lead secure code reviews, threat modeling, and architectural design.
• Develop automated testing frameworks and mature Secure SDLC.
• Manage application vulnerability assessments and penetration tests.
• Support developers by implementing security best practices.
• Drive security culture with training and bug bounty programs.

Key Responsibilities

• Conduct security reviews and threat modeling sessions.
• Implement and mature secure software development lifecycles.
• Coordinate penetration tests and vulnerability management efforts.
• Develop and maintain security tools and bug bounty program.
• Collaborate with global teams to ensure product security.

Team Culture & Environment

Work in a fast-paced, remote-first environment with global collaboration. TRM Labs values transparency, mutual respect, and a results-driven culture. Expect to work across different time zones while engaging in a mission-critical role that directly impacts global security.

Key Skills/Competency

• Application Security
• Threat Modeling
• Secure SDLC
• Vulnerability Management
• Penetration Testing
• Cloud Security (GCP, AWS)
• Python
• NodeJS
• React
• Security Best Practices