Engineering Director (Application Security)

Join Trail of Bits, a premier security consultancy, as the Engineering Director for the Application Security Practice. In this role, you will lead a team of talented security consulting engineers, drive business growth and service innovation, and oversee client engagement and quality assurance. You will also contribute to AI adoption and advocacy, manage the practice's budget, and build strategic partnerships. This position offers a competitive salary, comprehensive benefits, and opportunities for professional development.

• Oversee the practice’s business activity and performance, ensuring successful client service delivery.
• Develop and lead a team of talented security consulting engineers, fostering a culture of continuous growth and improvement.
• Drive business expansion by identifying new market opportunities, developing innovative service offerings, and expanding existing services.
• Excellent interpersonal and communication skills, capable of engaging with a diverse range of stakeholders, understanding their needs, and delivering measurable results
• Consulting background with significant contributions to client projects, encompassing strategic planning, leading teams, project management within tight deadlines, and expertise in proposal development, project scoping, and driving sales to delivery
• In-depth understanding of application security, with the ability to identify and mitigate vulnerabilities effectively
• Knowledgeable in static and dynamic analysis testing methods and the tools for efficient and secure software
• 10+ years of experience in professional services delivery, including technical leadership roles and leading technical teams through client engagements
• Proficiency in using AI tools and at least 4 modern programming languages or frameworks, including, but not limited to, Rust, Go, Python, C/C++, Python, and JavaScript
• Expertise and an engineering mindset in application security, with a continuous commitment to keeping abreast of industry trends and challenges
• Proficiency in providing specialized technical security services, including Secure Code Reviews, Dynamic Application Testing, Fuzzing, Threat Modeling and Design Reviews, Cloud Native Assessments, iOS/Android security, Containers and Orchestration security.
• Active contribution to the field through research, speaking engagements, development of security tools, or other thought leadership activities