TRM Labs

TRM Labs

Product Security Engineer

United States

Sponsorship not specified$171k-$800kDetected 21 days ago
PythonReactNode.jsCode ReviewGitAWSGCPCI/CDA/B TestingCybersecurityPenetration TestingTest AutomationLeadershipCommunicationCollaborationProblem SolvingAdaptability

Stay score

odds of building a lasting career here

51Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role52
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

4 transfer filings in the last year, covering 4 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • The Security team is responsible for and committed to securing all things at TRM.
  • From our customers to our code, and everything in between, the security team is involved in all aspects of the business.
  • From designing the technical strategy to company-wide best practices and implementation, you'll work closely with engineering and engineering leadership to ensure TRM's products are safe and secure.

Responsibilities

  • BUILD A SAFER WORLD.
  • TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks.
  • Lead application security reviews and threat modeling, including secure code review, architectural design, and testing
  • Develop automated testing and mature our Secure SDLC
  • Own and perform application security vulnerability management
  • Support software engineers and product teams by developing application security best practices
  • Develop and maintain the bug bounty program
  • Our collaborative approach ensures that we not only mitigate these risks but also align our efforts with business goals to protect and drive success.
  • We are building a safer world.
  • This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined.

Requirements

  • Minimum 8 years of experience in Software Development and testing.
  • Proficiency in software development languages: Python, NodeJS, React
  • Strong understanding of encryption, authentication, and authorization protocols
  • Deep experience with common software flaws (e.g., OWASP and CWE), testing methodologies, and using common security tooling for testing.
  • Professional experience with open source, commercial, or native security solutions for cloud providers such as GCP and AWS.
  • Experience with modern secure software development lifecycles, threat modeling, and best practices.
  • Experience with conducting efficient and comprehensive code security reviews on a daily or weekly basis
  • Experience triaging and remediating vulnerabilities in software packages or libraries
  • Experience with Software Security tools such as Github advanced security or other SAST, DAST, and SCA tools
  • Experience with Web application testing frameworks such as BurpSuite, OWASP ZAP, etc.

Nice to have

  • Security certifications such as OSCP, CEH, GWAPT are a plus.
  • Familiarity with security frameworks (e.g., NIST SP 800-171 SSDF) is a plus

Compensation

  • Your recruiter will present the offer and compensation details.

Company info

  • The culture of our team is built on mutual respect, where everyone's opinion is valued and heard.
  • We prioritize flexibility and efficiency, always seeking smarter ways to work without compromising quality.
  • Transparency is at the heart of how we operate, both within the team and with the business, as we focus on clearly communicating and addressing cyber risks.
  • Team's Time Zones:
  • Eastern Standard Time (EST - GMT-4)
  • Pacific Standard Time (PST - GMT-7)
  • Central European Summer Time (CET - GMT+2)
  • Learn about TRM Speed in this position:
  • Prioritize Rapid Threat Assessments: Efficiently perform security risk assessments and triage vulnerabilities based on immediate risk to the business, focusing on the most critical issues with minimal delays.
  • Integrate Security Early in Development: Embed security testing and reviews within our Product Shipping Framework and CI/CD pipelines to ensure that security is automated and runs parallel to the fast-paced development cycle, preventing bottlenecks.
  • Proactively Educate Developers: Conduct just-in-time security training for developers and engineers, offering real-time advice and code reviews to help them produce secure code without interrupting their workflow.
  • Optimize Tools for Speed: Leverage lightweight and efficient security tools that can be quickly integrated into development environments without slowing down deployments, ensuring continuous and secure product iterations.
  • Work Week Travel: This role requires participation in in-person R&D work weeks, typically 1-2 times per quarter, at a TRM hub or other designated location.
Apply directly at TRM Labs →Create a free account for alerts like thisView TRM Labs immigration profile

This listing is sourced directly from TRM Labs's careers page and normalized into a canonical job model.