TRM Labs
Product Security Engineer, Senior
United States · Remote · Senior · Full-time · Posted Oct 1, 2026
- Experience
- Minimum 8 years in software development and testing.
- Education
- BS (or equivalent) in Computer Science, Computer Engineering, or related field.
- Visa sponsorship
- U.S. citizenship required.
About the job
Leads application security reviews and builds security practices, testing, and vulnerability management into TRM’s software development lifecycle.
What you'll do
- Lead security reviews, threat modeling, secure code review, and testing; manage application vulnerabilities and penetration testing engagements.
- Develop automated security testing, secure development practices, and the bug bounty program.
- Advise and train engineering teams, foster security champions, and advance platform security initiatives.
What they ask for
- At least 8 years of experience in software development and testing.
- BS (or equivalent) in Computer Science, Computer Engineering, or a related field.
- Proficiency in Python, NodeJS, and React; strong knowledge of encryption, authentication, authorization, software flaws, and security testing.
- Experience with cloud security, secure SDLC, code security reviews, vulnerability remediation, security testing tools, agile software development, and application or infrastructure penetration testing.
Nice to have
- Security certifications such as OSCP, CEH, or GWAPT.
- Familiarity with security frameworks such as NIST SP 800-171 SSDF.
Tools
Python, NodeJS, React, GCP, AWS, Github advanced security, BurpSuite, OWASP ZAP
AI focus
AI fluency is expected and assessed in interviews; employees are expected to use AI to accelerate workflows, structure and solve problems, improve output quality, and increase speed and leverage. The role’s stated security duties do not specify other AI work.
Model-written summary · the original posting is authoritative